last executing test programs: 16m11.357766857s ago: executing program 0 (id=1481): r0 = memfd_create(0x0, 0x3) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16m11.357560027s ago: executing program 0 (id=1482): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast2, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000180)=""/49, 0x31) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0xf1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000340)=""/52, 0x34, 0x0, &(0x7f0000000380)=""/139, 0x8b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f00000e4000/0x1000)=nil, 0x1000, 0x1000004) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) socket(0x2, 0x80805, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) 16m11.030998497s ago: executing program 0 (id=1490): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@bsdgroups}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000040)=0x7, 0x0, 0x4) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000d00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000c03a00fc000000000000000000000000000000ff0200000000000000000000000000010401907800000000608bb91d00001100fe8000000000000000000000000000aafe8800000000000000000000000000010000ffff01030000000067a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cf0502000000000100000000000000"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 16m10.688252869s ago: executing program 0 (id=1499): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r1, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2}, 0x64) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x3000005, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0xfe, 0xa, 0x0, 0x25, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0x6, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16m10.604682237s ago: executing program 0 (id=1502): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0xfffffffd}) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0000000000000008b703b82b3429ef169647e5c88a6a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6d}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x37, 0x0, @val=@netfilter={0x3, 0x1, 0x7}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x25, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8a0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd8}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x400, 0x9b, &(0x7f0000000900)=""/155, 0x41100, 0x10, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listen(r3, 0x2) accept4(r3, 0x0, 0x0, 0x80800) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000140)=0x7, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) close_range(r7, 0xffffffffffffffff, 0x0) 16m10.441823172s ago: executing program 0 (id=1504): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x20000040) 16m10.441650992s ago: executing program 32 (id=1504): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x20000040) 2.126938254s ago: executing program 1 (id=17244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x404, 0x49, 0x0, 0xffffffffffffffff, 0x200000}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r2, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) 1.961459689s ago: executing program 3 (id=17251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$usbfs(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x11, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) close(r0) 1.932861241s ago: executing program 2 (id=17252): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x18842, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001100000020000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x451}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x17b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000001) 1.870035817s ago: executing program 5 (id=17256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) uname(&(0x7f00000000c0)=""/107) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b40880000000000073001200000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.847768019s ago: executing program 5 (id=17257): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f00000001c0)=0x81, 0x4) sendto$inet6(r2, 0x0, 0xa, 0x20891, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010000000400a5af5fffbdcab7fb3ca714efe72b4a67f7fe03a44ed2cdfc8c13d8164de101dbefaa2f211f02ca3a04847e8b1fc3a5aca242dd691c59f99180e2fed86193555286a84d0675e70c0b0f795269fa78f084ead418a8bba6a6f893bcf770405965a21077672f1ac93ca40a51380fe134bcd6543b6518d27d149d690204e62a4b504fb80336f7feffffff342dd9"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', r3, 0x8, 0x700, 0x3, 0x101, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x7, 0x6, '[]iS'}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x7, [{@empty, 0x2}, {@local, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0xb, [{@rand_addr=0x64010101, 0x9}, {@private=0xa010102, 0x1000}, {@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1}]}]}}}}}) r7 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x2003}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040020}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000027bd7000fedbdf2510000000080039000400000008003b0008000000050037000100000008002b0084000000080039000800000008000600f9b746dad152173ed04a9d7da8b67c66ffa1326dd359af7803fb5336d646d39a60f66522a3c09222b2644c17b62519900fea5c545acfa8d87e5172288a5641448e93c8f91bab82fd4b4ddf058b7bf5b45e733e8777f2c0bd9308a3e189028ec35af62ac8b1", @ANYRES32=r6, @ANYBLOB="050038000000000005002e0001000000080032000600000005003800000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="00006a2a0d000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000f7314bff00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40a540, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.784478155s ago: executing program 5 (id=17258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 1.777400746s ago: executing program 2 (id=17259): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0xa5d1, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) 1.772877076s ago: executing program 4 (id=17260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) shmat(0x0, &(0x7f000000e000/0x4000)=nil, 0x1000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000100306010200000000000000000a0000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) eventfd(0x0) 1.738019819s ago: executing program 4 (id=17261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) uname(&(0x7f00000000c0)=""/107) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.693680953s ago: executing program 2 (id=17262): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="38000000082000009633084374340f5964c9419c0b83066cbffe7517977dc0822a3cd766a1b64c43f9daed4992d2419bfa27a9fade10d9aafbbebdb291a732870ee877b6bf4ab8562d2946603c9e5a7ccbaee0c5c6031fbce65a857d3637784df1760505404598aec83c052bac0dcfb7cbfbe5d53eccfa5ae118a603c02a742d5da314db40", @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x200, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x10, 0x20, 0x0, 0x2}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x2}}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x3, 0x2, 0x77}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000640)=""/121, 0x4e, 0x79, 0x0, 0xe3d4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6d5b, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x0, 0xbe8a33086b5e512e, 0x6, 0x2, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8576}}]}, &(0x7f0000000300)='syzkaller\x00', 0x80, 0xc7, &(0x7f0000000400)=""/199, 0x40f00, 0x7c, '\x00', r5, @tracing=0x19, r6, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x6, 0x40}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000780)=[{0x4, 0x5, 0x0, 0x8}, {0x1, 0x5, 0xb, 0x7}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000880)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000070000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b702", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000eb4c980000000000005608000000ebe4ed779c824617939f58453cefaa0000008500000007000000b7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 1.561975906s ago: executing program 4 (id=17263): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) flock(r2, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r6 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x8) tkill(r6, 0x12) tkill(r6, 0x1) tkill(r6, 0x14) 1.135758745s ago: executing program 1 (id=17264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'cpuacct'}]}, 0x9) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_read_part_table(0x104a, &(0x7f0000002500)="$eJzsz70JAlEQBOA58fxBkFeCxlZxppoa2YQlCIK9aI/y5PASEyMDhe8LFmZ3kg0/4/rpuHiPu8dpmpxX61y6UTKbD/tS63aTZUmOfdw3uXWTNKXN+FVoh2Ltx+H+/S8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P88AwAA//+6Nwo3") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000002400}, 0xc) utime(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)={0x2d0, r4, 0x128, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4eb7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7040894f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4e, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b0a5f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd, @loopback, 0x6}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xea09d1f0df86769a}, 0x40841) 1.093653639s ago: executing program 3 (id=17265): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) 959.177252ms ago: executing program 3 (id=17266): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x18842, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001100000020000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r4], 0x20}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x451}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x17b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7b2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000001) 826.696604ms ago: executing program 5 (id=17267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x658, 0x3c8, 0x2f8, 0x2f8, 0x0, 0x3c8, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [0x0, 0xffffffff], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'virt_wifi0\x00', {0x4, 0x6, 0x40, 0x5, 0xe, 0x0, 0x200, 0x7, 0x18, 0x80}, {0x6ad7}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [0xff000000], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000c3377dae586233f7bb0c", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2008015) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 820.502644ms ago: executing program 2 (id=17268): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f00000001c0)=0x81, 0x4) sendto$inet6(r2, 0x0, 0xa, 0x20891, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010000000400a5af5fffbdcab7fb3ca714efe72b4a67f7fe03a44ed2cdfc8c13d8164de101dbefaa2f211f02ca3a04847e8b1fc3a5aca242dd691c59f99180e2fed86193555286a84d0675e70c0b0f795269fa78f084ead418a8bba6a6f893bcf770405965a21077672f1ac93ca40a51380fe134bcd6543b6518d27d149d690204e62a4b504fb80336f7feffffff342dd9"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', r3, 0x8, 0x700, 0x3, 0x101, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast1, @multicast2, {[@generic={0x7, 0x6, '[]iS'}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x7, [{@empty, 0x2}, {@local, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0xb, [{@rand_addr=0x64010101, 0x9}, {@private=0xa010102, 0x1000}, {@multicast1, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1}]}]}}}}}) r7 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x2003}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1040020}, 0xc, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000027bd7000fedbdf2510000000080039000400000008003b0008000000050037000100000008002b0084000000080039000800000008000600f9b746dad152173ed04a9d7da8b67c66ffa1326dd359af7803fb5336d646d39a60f66522a3c09222b2644c17b62519900fea5c545acfa8d87e5172288a5641448e93c8f91bab82fd4b4ddf058b7bf5b45e733e8777f2c0bd9308a3e189028ec35af62ac8b1", @ANYRES32=r6, @ANYBLOB="050038000000000005002e0001000000080032000600000005003800000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="00006a2a0d000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000f7314bff00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40a540, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x3) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 786.938847ms ago: executing program 1 (id=17269): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 783.095918ms ago: executing program 5 (id=17270): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x40}, 0x20000000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000002c0)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r7, 0xc}, 0x94) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000140)="441f1fd600270bee724ef54e91eeffbe1e68d5040d73161f", 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r9 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040845}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018004000000000002000000020000000050000000300110e0100000f000000040b000000000000000000"], 0x0, 0x3d, 0x0, 0x0, 0x1002}, 0x28) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$kcm(0x10, 0x7, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) 751.528621ms ago: executing program 2 (id=17271): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) shmat(0x0, &(0x7f000000e000/0x4000)=nil, 0x1000) eventfd(0x0) 727.954883ms ago: executing program 1 (id=17272): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) syz_open_procfs(0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0xa5d1, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) 722.344653ms ago: executing program 2 (id=17273): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x2, @perf_bp={0x0, 0xd}, 0x1216, 0x2010000, 0x2, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16}) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x91, 0x2001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x4}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x6, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xab7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x4, 0x4, 0x2, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10002, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9ff, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x0, 0xd, 0x3, 0xb, 0xffffffff, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0xf, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x83, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfa85, 0x9, 0xff, 0xa, 0x6, 0x7, 0x1000100, 0x1, 0x8, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x80, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0x200000b, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffffa0c, 0x3, 0xfffffffd, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x8, 0x9, 0x9, 0x4, 0x6, 0x7, 0x80, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x100002, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80c, 0xffe, 0x3, 0x3f7, 0x4, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'nq\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000003800)=ANY=[@ANYBLOB='p\n\x00\x00', @ANYRES16, @ANYBLOB="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"], 0xa70}}, 0x40000) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 704.269055ms ago: executing program 1 (id=17274): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a88180d000000000000037ad3c04594282407000000b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7feeb03000000000000648a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000840)=""/242) 700.484425ms ago: executing program 3 (id=17275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgget$private(0x0, 0x480) 677.862127ms ago: executing program 3 (id=17276): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) setgid(0x0) 673.101858ms ago: executing program 4 (id=17277): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000840)=""/242) 629.946432ms ago: executing program 3 (id=17278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x6}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000000180)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 629.614372ms ago: executing program 4 (id=17279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x5c, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0xfffffd65}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'cpuacct'}]}, 0x9) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_read_part_table(0x104a, &(0x7f0000002500)="$eJzsz70JAlEQBOA58fxBkFeCxlZxppoa2YQlCIK9aI/y5PASEyMDhe8LFmZ3kg0/4/rpuHiPu8dpmpxX61y6UTKbD/tS63aTZUmOfdw3uXWTNKXN+FVoh2Ltx+H+/S8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P88AwAA//+6Nwo3") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000002400}, 0xc) utime(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000900)={0x2d0, r4, 0x128, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4eb7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7040894f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xff, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4e, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b0a5f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd, @loopback, 0x6}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xea09d1f0df86769a}, 0x40841) 629.342012ms ago: executing program 1 (id=17280): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="38000000082000009633084374340f5964c9419c0b83066cbffe7517977dc0822a3cd766a1b64c43f9daed4992d2419bfa27a9fade10d9aafbbebdb291a732870ee877b6bf4ab8562d2946603c9e5a7ccbaee0c5c6031fbce65a857d3637784df1760505404598aec83c052bac0dcfb7cbfbe5d53eccfa5ae118a603c02a742d5da314db40", @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x200, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x10, 0x20, 0x0, 0x2}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x2}}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x5, [{0x3, 0x2, 0x77}]}]}, {0x0, [0x61, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000640)=""/121, 0x4e, 0x79, 0x0, 0xe3d4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6d5b, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x0, 0xbe8a33086b5e512e, 0x6, 0x2, 0xfffffffffffffffc}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8576}}]}, &(0x7f0000000300)='syzkaller\x00', 0x80, 0xc7, &(0x7f0000000400)=""/199, 0x40f00, 0x7c, '\x00', r5, @tracing=0x19, r6, 0x8, &(0x7f0000000700)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0xf, 0x6, 0x40}, 0x10, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000780)=[{0x4, 0x5, 0x0, 0x8}, {0x1, 0x5, 0xb, 0x7}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000880)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000070000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b702", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000eb4c980000000000005608000000ebe4ed779c824617939f58453cefaa0000008500000007000000b7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 573.673167ms ago: executing program 5 (id=17281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) read$usbfs(r3, 0x0, 0x0) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x11, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x100) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 0s ago: executing program 4 (id=17282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0xfffffffd, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): de: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.861800][T16798] RSP: 002b:00007f91db76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 1018.861823][T16798] RAX: ffffffffffffffda RBX: 00007f91dcf65fa0 RCX: 00007f91dcd0f749 [ 1018.861838][T16798] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1018.861929][T16798] RBP: 00007f91db76f090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.861941][T16798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.861953][T16798] R13: 00007f91dcf66038 R14: 00007f91dcf65fa0 R15: 00007ffceb52a618 [ 1018.862034][T16798] [ 1019.212394][T16800] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.16537'. [ 1019.295383][T16807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.356080][T16807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.415923][T16807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.466139][T16807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.551268][T16821] netlink: 'syz.5.16546': attribute type 9 has an invalid length. [ 1019.559180][T16821] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.16546'. [ 1019.567049][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16544'. [ 1019.577503][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16544'. [ 1019.585390][ T7301] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.614509][ T7301] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.624989][T16810] tipc: Enabling of bearer rejected, already enabled [ 1019.644097][ T7301] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.671730][ T7301] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.755427][T16832] 0ªX¹¦À: renamed from caif0 [ 1019.781135][T16832] 0ªX¹¦À: entered allmulticast mode [ 1019.968165][T16858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=16858 comm=syz.1.16560 [ 1020.030922][T16857] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.048148][T16855] tipc: Enabling of bearer rejected, already enabled [ 1020.086373][T16857] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.135704][T16857] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.148004][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 1020.148022][ T29] audit: type=1400 audit(1767393668.214:195204): avc: denied { read write } for pid=16864 comm="syz.4.16562" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1020.209278][ T29] audit: type=1400 audit(1767393668.214:195205): avc: denied { open } for pid=16864 comm="syz.4.16562" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1020.234333][ T29] audit: type=1400 audit(1767393668.214:195206): avc: denied { ioctl } for pid=16864 comm="syz.4.16562" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1020.261005][ T29] audit: type=1400 audit(1767393668.234:195207): avc: denied { create } for pid=16856 comm="syz.1.16560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1020.282444][T16857] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.295417][ T29] audit: type=1400 audit(1767393668.364:195208): avc: denied { create } for pid=16864 comm="syz.4.16562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1020.327768][ T29] audit: type=1400 audit(1767393668.364:195209): avc: denied { write } for pid=16864 comm="syz.4.16562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1020.377653][ T29] audit: type=1400 audit(1767393668.444:195210): avc: denied { prog_run } for pid=16867 comm="syz.4.16563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1020.425290][T16046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.446228][T16046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.467815][T16046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.480201][T16046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.494630][ T29] audit: type=1400 audit(1767393668.564:195211): avc: denied { read write } for pid=16869 comm="syz.4.16564" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1020.553138][ T29] audit: type=1400 audit(1767393668.564:195212): avc: denied { open } for pid=16869 comm="syz.4.16564" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1020.576816][ T29] audit: type=1400 audit(1767393668.594:195213): avc: denied { create } for pid=16869 comm="syz.4.16564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1020.752157][T16884] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1020.885773][T16898] IPv6: Can't replace route, no match found [ 1020.908488][T16900] 0ªX¹¦À: renamed from caif0 [ 1020.925761][T16900] 0ªX¹¦À: entered allmulticast mode [ 1021.764331][T16916] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1022.173441][T16945] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1022.336706][T16958] 0ªX¹¦À: renamed from caif0 [ 1022.350816][T16958] 0ªX¹¦À: entered allmulticast mode [ 1022.654567][T16968] lo speed is unknown, defaulting to 1000 [ 1022.661310][T16968] lo speed is unknown, defaulting to 1000 [ 1023.240563][T14769] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1023.251589][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1023.251620][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.251634][T14769] Call Trace: [ 1023.251701][T14769] [ 1023.251712][T14769] __dump_stack+0x1d/0x30 [ 1023.251740][T14769] dump_stack_lvl+0x95/0xd0 [ 1023.251776][T14769] dump_stack+0x15/0x1b [ 1023.251807][T14769] dump_header+0x81/0x240 [ 1023.251830][T14769] oom_kill_process+0x295/0x350 [ 1023.251894][T14769] out_of_memory+0x97b/0xb80 [ 1023.251923][T14769] try_charge_memcg+0x610/0xa10 [ 1023.251970][T14769] charge_memcg+0x51/0xc0 [ 1023.252005][T14769] __mem_cgroup_charge+0x28/0xb0 [ 1023.252037][T14769] filemap_add_folio+0x111/0x360 [ 1023.252080][T14769] __filemap_get_folio_mpol+0x326/0x650 [ 1023.252110][T14769] filemap_fault+0x44d/0xb70 [ 1023.252176][T14769] __do_fault+0xbc/0x200 [ 1023.252197][T14769] handle_mm_fault+0xfab/0x2c60 [ 1023.252304][T14769] do_user_addr_fault+0x630/0x1080 [ 1023.252337][T14769] exc_page_fault+0x62/0xa0 [ 1023.252368][T14769] asm_exc_page_fault+0x26/0x30 [ 1023.252390][T14769] RIP: 0033:0x7f5822a75fd4 [ 1023.252454][T14769] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 1023.252474][T14769] RSP: 002b:00007ffedeba37d0 EFLAGS: 00010206 [ 1023.252494][T14769] RAX: 0000001b2fa24000 RBX: 0000000000000170 RCX: 00000000000f9830 [ 1023.252510][T14769] RDX: 000000000b5ee0c5 RSI: 00007ffedeba3860 RDI: 0000000000000001 [ 1023.252582][T14769] RBP: 00007ffedeba380c R08: 000000002b601e50 R09: 7fffffffffffffff [ 1023.252606][T14769] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1023.252621][T14769] R13: 00000000000927c0 R14: 00000000000f9909 R15: 00007ffedeba3860 [ 1023.252643][T14769] [ 1023.431933][T14769] memory: usage 307200kB, limit 307200kB, failcnt 3855 [ 1023.439328][T14769] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 1023.447333][T14769] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 1023.454645][T14769] Memory cgroup stats for /syz1: [ 1023.515546][T14769] cache 0 [ 1023.523990][T14769] rss 4096 [ 1023.527327][T14769] shmem 0 [ 1023.530330][T14769] mapped_file 0 [ 1023.530558][T16978] IPv6: Can't replace route, no match found [ 1023.534001][T14769] dirty 0 [ 1023.542833][T14769] writeback 12288 [ 1023.546613][T14769] workingset_refault_anon 631 [ 1023.551311][T14769] workingset_refault_file 4365 [ 1023.556193][T14769] swap 192512 [ 1023.559709][T14769] swapcached 65536 [ 1023.563707][T14769] pgpgin 935147 [ 1023.567193][T14769] pgpgout 935131 [ 1023.570751][T14769] pgfault 872186 [ 1023.574401][T14769] pgmajfault 485 [ 1023.578154][T14769] inactive_anon 65536 [ 1023.582284][T14769] active_anon 0 [ 1023.585750][T14769] inactive_file 0 [ 1023.589408][T14769] active_file 0 [ 1023.593110][T14769] unevictable 0 [ 1023.596594][T14769] hierarchical_memory_limit 314572800 [ 1023.601994][T14769] hierarchical_memsw_limit 9223372036854771712 [ 1023.608138][T14769] total_cache 0 [ 1023.611680][T14769] total_rss 4096 [ 1023.615256][T14769] total_shmem 0 [ 1023.618780][T14769] total_mapped_file 0 [ 1023.622804][T14769] total_dirty 0 [ 1023.626314][T14769] total_writeback 12288 [ 1023.630477][T14769] total_workingset_refault_anon 631 [ 1023.635766][T14769] total_workingset_refault_file 4365 [ 1023.641093][T14769] total_swap 192512 [ 1023.644934][T14769] total_swapcached 65536 [ 1023.649254][T14769] total_pgpgin 935147 [ 1023.653323][T14769] total_pgpgout 935131 [ 1023.657630][T14769] total_pgfault 872186 [ 1023.661803][T14769] total_pgmajfault 485 [ 1023.665898][T14769] total_inactive_anon 65536 [ 1023.670488][T14769] total_active_anon 0 [ 1023.674629][T14769] total_inactive_file 0 [ 1023.678798][T14769] total_active_file 0 [ 1023.683011][T14769] total_unevictable 0 [ 1023.687169][T14769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16591,pid=16932,uid=0 [ 1023.702100][T14769] Memory cgroup out of memory: Killed process 16932 (syz.1.16591) total-vm:93968kB, anon-rss:1136kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1023.727208][T16980] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1023.931212][T17004] warn_alloc: 3 callbacks suppressed [ 1023.931229][T17004] syz.1.16619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1023.951265][T17004] CPU: 1 UID: 0 PID: 17004 Comm: syz.1.16619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1023.951300][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.951360][T17004] Call Trace: [ 1023.951368][T17004] [ 1023.951378][T17004] __dump_stack+0x1d/0x30 [ 1023.951462][T17004] dump_stack_lvl+0x95/0xd0 [ 1023.951488][T17004] dump_stack+0x15/0x1b [ 1023.951509][T17004] warn_alloc+0x12b/0x1a0 [ 1023.951579][T17004] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 1023.951641][T17004] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1023.951679][T17004] __vmalloc_node_range_noprof+0xa0/0x1310 [ 1023.951707][T17004] ? common_lsm_audit+0x1ca/0x230 [ 1023.951806][T17004] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1023.951871][T17004] ? slow_avc_audit+0x104/0x140 [ 1023.951943][T17004] ? should_fail_ex+0x30/0x280 [ 1023.951971][T17004] ? should_failslab+0x8c/0xb0 [ 1023.952064][T17004] vmalloc_user_noprof+0x7d/0xb0 [ 1023.952128][T17004] ? xskq_create+0x80/0xe0 [ 1023.952157][T17004] xskq_create+0x80/0xe0 [ 1023.952246][T17004] xsk_init_queue+0x95/0xf0 [ 1023.952281][T17004] xsk_setsockopt+0x3f5/0x640 [ 1023.952328][T17004] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1023.952361][T17004] __sys_setsockopt+0x184/0x200 [ 1023.952393][T17004] __x64_sys_setsockopt+0x64/0x80 [ 1023.952478][T17004] x64_sys_call+0x21d5/0x3000 [ 1023.952507][T17004] do_syscall_64+0xca/0x2b0 [ 1023.952576][T17004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.952623][T17004] RIP: 0033:0x7f5822b9f749 [ 1023.952642][T17004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.952741][T17004] RSP: 002b:00007f5821607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1023.952766][T17004] RAX: ffffffffffffffda RBX: 00007f5822df5fa0 RCX: 00007f5822b9f749 [ 1023.952783][T17004] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1023.952798][T17004] RBP: 00007f5822c23f91 R08: 0000000000000004 R09: 0000000000000000 [ 1023.952811][T17004] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.952827][T17004] R13: 00007f5822df6038 R14: 00007f5822df5fa0 R15: 00007ffedeba3448 [ 1023.952941][T17004] [ 1023.954124][T16989] tipc: Enabling of bearer rejected, already enabled [ 1023.962904][T17004] Mem-Info: [ 1023.962915][T17004] active_anon:3544 inactive_anon:44 isolated_anon:0 [ 1023.962915][T17004] active_file:11234 inactive_file:2696 isolated_file:0 [ 1023.962915][T17004] unevictable:0 dirty:89 writeback:3 [ 1023.962915][T17004] slab_reclaimable:3463 slab_unreclaimable:60273 [ 1023.962915][T17004] mapped:29430 shmem:152 pagetables:974 [ 1023.962915][T17004] sec_pagetables:0 bounce:0 [ 1023.962915][T17004] kernel_misc_reclaimable:0 [ 1023.962915][T17004] free:1776696 free_pcp:80459 free_cma:0 [ 1023.977773][T17001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=17001 comm=syz.3.16618 [ 1023.979844][T17004] Node 0 active_anon:14060kB inactive_anon:176kB active_file:44936kB inactive_file:10784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117720kB dirty:356kB writeback:12kB shmem:608kB kernel_stack:4848kB pagetables:3896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1024.066754][T17014] IPv6: Can't replace route, no match found [ 1024.068384][T17004] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.273301][T17004] lowmem_reserve[]: 0 2880 7859 7859 [ 1024.273419][T17004] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 1024.273489][T17004] lowmem_reserve[]: 0 0 4978 4978 [ 1024.273543][T17004] Node 0 Normal free:3709960kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14060kB inactive_anon:176kB active_file:44936kB inactive_file:10784kB unevictable:0kB writepending:368kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:317768kB local_pcp:197860kB free_cma:0kB [ 1024.273680][T17004] lowmem_reserve[]: 0 0 0 0 [ 1024.273729][T17004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1024.273993][T17004] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 1024.274210][T17004] Node 0 Normal: 776*4kB (UME) 2298*8kB (UME) 1904*16kB (UME) 1262*32kB (UM) 885*64kB (UME) 895*128kB (UME) 859*256kB (UME) 708*512kB (UME) 541*1024kB (UM) 408*2048kB (UM) 360*4096kB (M) = 3710064kB [ 1024.274454][T17004] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1024.274531][T17004] 14125 total pagecache pages [ 1024.274538][T17004] 46 pages in swap cache [ 1024.274545][T17004] Free swap = 124708kB [ 1024.274563][T17004] Total swap = 124996kB [ 1024.274571][T17004] 2097051 pages RAM [ 1024.274577][T17004] 0 pages HighMem/MovableOnly [ 1024.274583][T17004] 81272 pages reserved [ 1024.359740][T17004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.440433][T17004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.456833][T17020] lo speed is unknown, defaulting to 1000 [ 1024.457208][T17020] lo speed is unknown, defaulting to 1000 [ 1024.483192][T17004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.547897][T17004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.712664][T17030] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1024.728178][T16010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.744996][T16010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.757701][T16010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.811121][T16010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.084916][T17037] tipc: Started in network mode [ 1025.089846][T17037] tipc: Node identity ac14140f, cluster identity 4711 [ 1025.114836][T17037] tipc: New replicast peer: 255.255.255.255 [ 1025.121262][T17037] tipc: Enabled bearer , priority 10 [ 1025.331325][T17063] netlink: 'syz.5.16638': attribute type 9 has an invalid length. [ 1025.339309][T17063] __nla_validate_parse: 9 callbacks suppressed [ 1025.339326][T17063] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.16638'. [ 1025.480508][T17067] syz!: rxe_newlink: already configured on team_slave_0 [ 1025.529151][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 1025.529169][ T29] audit: type=1326 audit(1767393673.597:195627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.589675][ T29] audit: type=1326 audit(1767393673.597:195628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.613653][ T29] audit: type=1326 audit(1767393673.597:195629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.637688][ T29] audit: type=1326 audit(1767393673.597:195630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.661590][ T29] audit: type=1326 audit(1767393673.597:195631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.685518][ T29] audit: type=1326 audit(1767393673.597:195632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.709325][ T29] audit: type=1326 audit(1767393673.597:195633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.733161][ T29] audit: type=1326 audit(1767393673.597:195634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.756971][ T29] audit: type=1326 audit(1767393673.597:195635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.780775][ T29] audit: type=1326 audit(1767393673.597:195636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17062 comm="syz.5.16638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1025.969684][T17090] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1026.079901][T17106] netlink: 'syz.4.16658': attribute type 9 has an invalid length. [ 1026.087844][T17106] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.16658'. [ 1026.240410][ T8209] tipc: Node number set to 2886997007 [ 1026.699867][T17130] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.817266][T17134] lo speed is unknown, defaulting to 1000 [ 1026.823820][T17134] lo speed is unknown, defaulting to 1000 [ 1027.343766][T17130] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.485058][T17130] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.630574][T17130] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.720386][T15986] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.732831][T15986] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.767808][T15986] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.788354][T15986] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.092067][T17190] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16691'. [ 1028.101446][T17190] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1028.119792][T17190] net_ratelimit: 217 callbacks suppressed [ 1028.119809][T17190] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1028.159936][T17192] IPv6: Can't replace route, no match found [ 1028.232403][T17198] IPv6: Can't replace route, no match found [ 1028.279662][T17200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.338858][T17204] netlink: 'syz.4.16698': attribute type 9 has an invalid length. [ 1028.346747][T17204] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.16698'. [ 1028.400554][T17200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.481093][T17200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.527603][T17215] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16703'. [ 1028.536662][T17215] 0ªX¹¦À: renamed from caif0 [ 1028.542935][T17215] 0ªX¹¦À: entered allmulticast mode [ 1028.548134][T17215] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1028.594660][T17200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.617819][T17220] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.16705'. [ 1028.627248][T17220] netlink: zone id is out of range [ 1028.632632][T17220] netlink: zone id is out of range [ 1028.637940][T17220] netlink: zone id is out of range [ 1028.643169][T17220] netlink: zone id is out of range [ 1028.648329][T17220] netlink: zone id is out of range [ 1028.653464][T17220] netlink: zone id is out of range [ 1028.658575][T17220] netlink: zone id is out of range [ 1028.663740][T17220] netlink: zone id is out of range [ 1028.787789][T17224] IPv6: Can't replace route, no match found [ 1028.882301][T17234] netlink: 'syz.3.16712': attribute type 9 has an invalid length. [ 1028.890216][T17234] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1029.010594][T17243] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1029.056317][T17247] IPv6: Can't replace route, no match found [ 1029.215501][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16720'. [ 1029.224600][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16720'. [ 1029.401875][T16034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.430572][T16034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.471036][T16034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.492840][T17263] netlink: 'syz.1.16725': attribute type 9 has an invalid length. [ 1029.500864][T17263] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.16725'. [ 1029.511806][T16034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1029.568648][T13744] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1029.579648][T13744] CPU: 1 UID: 0 PID: 13744 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1029.579683][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1029.579707][T13744] Call Trace: [ 1029.579715][T13744] [ 1029.579723][T13744] __dump_stack+0x1d/0x30 [ 1029.579748][T13744] dump_stack_lvl+0x95/0xd0 [ 1029.579826][T13744] dump_stack+0x15/0x1b [ 1029.579850][T13744] dump_header+0x81/0x240 [ 1029.579875][T13744] oom_kill_process+0x295/0x350 [ 1029.579977][T13744] out_of_memory+0x97b/0xb80 [ 1029.579999][T13744] try_charge_memcg+0x610/0xa10 [ 1029.580036][T13744] charge_memcg+0x51/0xc0 [ 1029.580125][T13744] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1029.580241][T13744] __read_swap_cache_async+0x17b/0x2d0 [ 1029.580274][T13744] swap_cluster_readahead+0x262/0x3c0 [ 1029.580336][T13744] swapin_readahead+0xde/0x820 [ 1029.580370][T13744] ? next_uptodate_folio+0x81c/0x890 [ 1029.580402][T13744] ? percpu_counter_add_batch+0xb6/0x130 [ 1029.580424][T13744] ? __rcu_read_unlock+0x4f/0x70 [ 1029.580552][T13744] ? swap_cache_get_folio+0x277/0x280 [ 1029.580592][T13744] do_swap_page+0x2b4/0x21e0 [ 1029.580623][T13744] ? __pfx_default_wake_function+0x10/0x10 [ 1029.580689][T13744] handle_mm_fault+0x9d8/0x2c60 [ 1029.580769][T13744] do_user_addr_fault+0x630/0x1080 [ 1029.580933][T13744] exc_page_fault+0x62/0xa0 [ 1029.581066][T13744] asm_exc_page_fault+0x26/0x30 [ 1029.581086][T13744] RIP: 0033:0x7f91dcbe5fd7 [ 1029.581106][T13744] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 1029.581208][T13744] RSP: 002b:00007ffceb52a9a0 EFLAGS: 00010206 [ 1029.581226][T13744] RAX: 0000001b2f424000 RBX: 000000000000027c RCX: 00000000000fb388 [ 1029.581240][T13744] RDX: 000000000a864346 RSI: 00007ffceb52aa30 RDI: 000000000000001c [ 1029.581256][T13744] RBP: 00007ffceb52a9dc R08: 000000002825cc03 R09: 7fffffffffffffff [ 1029.581271][T13744] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1029.581286][T13744] R13: 00000000000927c0 R14: 00000000000fb4eb R15: 00007ffceb52aa30 [ 1029.581309][T13744] [ 1029.581335][T13744] memory: usage 307200kB, limit 307200kB, failcnt 2038 [ 1029.797765][T13744] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 1029.805815][T13744] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 1029.813194][T13744] Memory cgroup stats for /syz4: [ 1029.813428][T13744] cache 0 [ 1029.821351][T13744] rss 0 [ 1029.824120][T13744] shmem 0 [ 1029.827058][T13744] mapped_file 0 [ 1029.830590][T13744] dirty 0 [ 1029.833529][T13744] writeback 0 [ 1029.836818][T13744] workingset_refault_anon 256 [ 1029.841610][T13744] workingset_refault_file 4041 [ 1029.846385][T13744] swap 204800 [ 1029.849721][T13744] swapcached 53248 [ 1029.853450][T13744] pgpgin 839642 [ 1029.857047][T13744] pgpgout 839629 [ 1029.860781][T13744] pgfault 898966 [ 1029.864378][T13744] pgmajfault 177 [ 1029.867932][T13744] inactive_anon 0 [ 1029.871827][T13744] active_anon 53248 [ 1029.875721][T13744] inactive_file 0 [ 1029.879461][T13744] active_file 0 [ 1029.882929][T13744] unevictable 0 [ 1029.886421][T13744] hierarchical_memory_limit 314572800 [ 1029.891828][T13744] hierarchical_memsw_limit 9223372036854771712 [ 1029.897992][T13744] total_cache 0 [ 1029.901478][T13744] total_rss 0 [ 1029.904788][T13744] total_shmem 0 [ 1029.908305][T13744] total_mapped_file 0 [ 1029.912261][T17264] tipc: Enabling of bearer rejected, already enabled [ 1029.920194][T13744] total_dirty 0 [ 1029.923672][T13744] total_writeback 0 [ 1029.927493][T13744] total_workingset_refault_anon 256 [ 1029.932741][T13744] total_workingset_refault_file 4041 [ 1029.938071][T13744] total_swap 204800 [ 1029.942034][T13744] total_swapcached 53248 [ 1029.946642][T13744] total_pgpgin 839642 [ 1029.950687][T13744] total_pgpgout 839629 [ 1029.954766][T13744] total_pgfault 898966 [ 1029.958881][T13744] total_pgmajfault 177 [ 1029.963058][T13744] total_inactive_anon 0 [ 1029.967213][T13744] total_active_anon 53248 [ 1029.971587][T13744] total_inactive_file 0 [ 1029.975802][T13744] total_active_file 0 [ 1029.979803][T13744] total_unevictable 0 [ 1029.983794][T13744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.16714,pid=17238,uid=0 [ 1029.998721][T13744] Memory cgroup out of memory: Killed process 17238 (syz.4.16714) total-vm:96016kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1030.071962][T17274] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1030.319241][T17291] netlink: 'syz.3.16736': attribute type 9 has an invalid length. [ 1030.337062][T14769] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1030.348087][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 1030.348122][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1030.348134][T14769] Call Trace: [ 1030.348141][T14769] [ 1030.348150][T14769] __dump_stack+0x1d/0x30 [ 1030.348272][T14769] dump_stack_lvl+0x95/0xd0 [ 1030.348292][T14769] dump_stack+0x15/0x1b [ 1030.348317][T14769] dump_header+0x81/0x240 [ 1030.348337][T14769] oom_kill_process+0x295/0x350 [ 1030.348400][T14769] out_of_memory+0x97b/0xb80 [ 1030.348490][T14769] try_charge_memcg+0x610/0xa10 [ 1030.348598][T14769] charge_memcg+0x51/0xc0 [ 1030.348627][T14769] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1030.348658][T14769] __read_swap_cache_async+0x17b/0x2d0 [ 1030.348751][T14769] swap_cluster_readahead+0x262/0x3c0 [ 1030.348792][T14769] swapin_readahead+0xde/0x820 [ 1030.348827][T14769] ? update_load_avg+0x1da/0x820 [ 1030.348854][T14769] ? __list_add_valid_or_report+0x38/0xe0 [ 1030.348933][T14769] ? __rcu_read_unlock+0x4f/0x70 [ 1030.348956][T14769] ? swap_cache_get_folio+0x277/0x280 [ 1030.348989][T14769] do_swap_page+0x2b4/0x21e0 [ 1030.349032][T14769] ? _raw_spin_unlock+0x26/0x50 [ 1030.349083][T14769] ? __schedule+0x85f/0xcd0 [ 1030.349108][T14769] ? __pfx_default_wake_function+0x10/0x10 [ 1030.349148][T14769] handle_mm_fault+0x9d8/0x2c60 [ 1030.349245][T14769] do_user_addr_fault+0x630/0x1080 [ 1030.349276][T14769] exc_page_fault+0x62/0xa0 [ 1030.349307][T14769] asm_exc_page_fault+0x26/0x30 [ 1030.349331][T14769] RIP: 0033:0x7f5822bd1fc5 [ 1030.349347][T14769] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 1030.349421][T14769] RSP: 002b:00007ffedeba3788 EFLAGS: 00010246 [ 1030.349442][T14769] RAX: 0000000000000000 RBX: 00000000000001a6 RCX: 00007f5822bd1fc3 [ 1030.349458][T14769] RDX: 00007ffedeba37a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1030.349507][T14769] RBP: 00007ffedeba380c R08: 0000000017740f51 R09: 0000000000000000 [ 1030.349520][T14769] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1030.349597][T14769] R13: 00000000000927c0 R14: 00000000000fb8bb R15: 00007ffedeba3860 [ 1030.349617][T14769] [ 1030.566298][T14769] memory: usage 307200kB, limit 307200kB, failcnt 3954 [ 1030.573388][T14769] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 1030.581335][T14769] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 1030.588735][T14769] Memory cgroup stats for /syz1: [ 1030.648219][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 1030.648239][ T29] audit: type=1400 audit(1767393678.399:196043): avc: denied { prog_run } for pid=17290 comm="syz.3.16736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1030.837463][ T29] audit: type=1400 audit(1767393678.899:196044): avc: denied { kexec_image_load } for pid=17285 comm="syz.2.16734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1030.869887][T17293] tipc: Enabling of bearer rejected, already enabled [ 1030.898707][ T29] audit: type=1400 audit(1767393678.959:196045): avc: denied { name_bind } for pid=17297 comm="syz.4.16738" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1030.920999][ T29] audit: type=1400 audit(1767393678.959:196046): avc: denied { read write } for pid=17297 comm="syz.4.16738" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1030.945490][ T29] audit: type=1400 audit(1767393678.959:196047): avc: denied { open } for pid=17297 comm="syz.4.16738" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1030.978299][T14769] cache 4096 [ 1030.981528][T14769] rss 0 [ 1030.984309][T14769] shmem 0 [ 1030.987260][T14769] mapped_file 4096 [ 1030.991029][T14769] dirty 0 [ 1030.994086][T14769] writeback 0 [ 1030.997398][T14769] workingset_refault_anon 692 [ 1031.002131][T14769] workingset_refault_file 5006 [ 1031.006970][T14769] swap 147456 [ 1031.010312][T14769] swapcached 110592 [ 1031.014130][T14769] pgpgin 942814 [ 1031.017609][T14769] pgpgout 942786 [ 1031.021181][T14769] pgfault 880605 [ 1031.024757][T14769] pgmajfault 521 [ 1031.028907][T14769] inactive_anon 65536 [ 1031.032896][T14769] active_anon 45056 [ 1031.036864][T14769] inactive_file 0 [ 1031.040528][T14769] active_file 4096 [ 1031.044295][T14769] unevictable 0 [ 1031.047766][T14769] hierarchical_memory_limit 314572800 [ 1031.053231][T14769] hierarchical_memsw_limit 9223372036854771712 [ 1031.059462][T14769] total_cache 4096 [ 1031.063198][T14769] total_rss 0 [ 1031.066494][T14769] total_shmem 0 [ 1031.070040][T14769] total_mapped_file 4096 [ 1031.074369][T14769] total_dirty 0 [ 1031.077867][T14769] total_writeback 0 [ 1031.081703][T14769] total_workingset_refault_anon 692 [ 1031.086913][T14769] total_workingset_refault_file 5006 [ 1031.092241][T14769] total_swap 147456 [ 1031.096061][T14769] total_swapcached 110592 [ 1031.100429][T14769] total_pgpgin 942814 [ 1031.104481][T14769] total_pgpgout 942786 [ 1031.108166][T17305] __nla_validate_parse: 3 callbacks suppressed [ 1031.108181][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16738'. [ 1031.108655][T14769] total_pgfault 880605 [ 1031.127875][T14769] total_pgmajfault 521 [ 1031.131990][T14769] total_inactive_anon 65536 [ 1031.136582][T14769] total_active_anon 45056 [ 1031.140973][T14769] total_inactive_file 0 [ 1031.145203][T14769] total_active_file 4096 [ 1031.149478][T14769] total_unevictable 0 [ 1031.153473][T14769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16726,pid=17267,uid=0 [ 1031.168350][T14769] Memory cgroup out of memory: Killed process 17267 (syz.1.16726) total-vm:93968kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1031.187756][ T29] audit: type=1326 audit(1767393679.099:196048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.3.16736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7e9f749 code=0x7ffc0000 [ 1031.211892][ T29] audit: type=1326 audit(1767393679.099:196049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.3.16736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c7e9f749 code=0x7ffc0000 [ 1031.235942][ T29] audit: type=1326 audit(1767393679.099:196050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.3.16736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7e9f749 code=0x7ffc0000 [ 1031.259720][ T29] audit: type=1326 audit(1767393679.099:196051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.3.16736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c7e9f749 code=0x7ffc0000 [ 1031.283571][ T29] audit: type=1326 audit(1767393679.099:196052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17290 comm="syz.3.16736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7e9f749 code=0x7ffc0000 [ 1031.396620][T17314] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16744'. [ 1031.425441][T17314] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1031.596995][T17328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1031.622631][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16747'. [ 1031.631661][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16747'. [ 1031.667374][T17335] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.16753'. [ 1031.738649][T17343] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16757'. [ 1031.773229][T17345] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16758'. [ 1031.793369][T17345] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1031.817857][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16756'. [ 1031.826862][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16756'. [ 1031.928231][T17355] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16762'. [ 1031.956152][T17355] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1032.415042][T17377] 0ªX¹¦À: renamed from caif0 [ 1032.422498][T17377] 0ªX¹¦À: entered allmulticast mode [ 1032.461078][T17383] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.520224][T17383] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.569723][T17390] lo speed is unknown, defaulting to 1000 [ 1032.597684][T17336] syz.1.16754 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1032.608877][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.1.16754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1032.608908][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1032.608919][T17336] Call Trace: [ 1032.608927][T17336] [ 1032.608936][T17336] __dump_stack+0x1d/0x30 [ 1032.608975][T17336] dump_stack_lvl+0x95/0xd0 [ 1032.608996][T17336] dump_stack+0x15/0x1b [ 1032.609015][T17336] dump_header+0x81/0x240 [ 1032.609037][T17336] oom_kill_process+0x295/0x350 [ 1032.609062][T17336] out_of_memory+0x97b/0xb80 [ 1032.609099][T17336] try_charge_memcg+0x610/0xa10 [ 1032.609207][T17336] charge_memcg+0x51/0xc0 [ 1032.609236][T17336] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1032.609267][T17336] __read_swap_cache_async+0x17b/0x2d0 [ 1032.609356][T17336] swap_cluster_readahead+0x362/0x3c0 [ 1032.609389][T17336] swapin_readahead+0xde/0x820 [ 1032.609440][T17336] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 1032.609471][T17336] ? __rcu_read_unlock+0x34/0x70 [ 1032.609568][T17336] ? __rcu_read_unlock+0x4f/0x70 [ 1032.609587][T17336] ? swap_cache_get_folio+0x277/0x280 [ 1032.609614][T17336] do_swap_page+0x2b4/0x21e0 [ 1032.609666][T17336] ? __pfx_default_wake_function+0x10/0x10 [ 1032.609745][T17336] handle_mm_fault+0x9d8/0x2c60 [ 1032.609783][T17336] do_user_addr_fault+0x630/0x1080 [ 1032.609817][T17336] exc_page_fault+0x62/0xa0 [ 1032.609858][T17336] asm_exc_page_fault+0x26/0x30 [ 1032.609900][T17336] RIP: 0033:0x7f5822a75a1e [ 1032.609949][T17336] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 23 38 00 85 c0 0f 8e a3 fd ff ff bd 97 fe ff 49 39 c4 73 a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 [ 1032.609969][T17336] RSP: 002b:00007ffedeba35b0 EFLAGS: 00010202 [ 1032.609987][T17336] RAX: 0000000000000001 RBX: 00007f5822df7da0 RCX: 0000000000000000 [ 1032.610000][T17336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555920a6808 [ 1032.610012][T17336] RBP: 00007f5822df7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1032.610028][T17336] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000fc1f5 [ 1032.610044][T17336] R13: 00007ffedeba36a0 R14: ffffffffffffffff R15: 00007ffedeba36c0 [ 1032.610087][T17336] [ 1032.610094][T17336] memory: usage 307200kB, limit 307200kB, failcnt 4767 [ 1032.634296][T17390] lo speed is unknown, defaulting to 1000 [ 1032.636673][T17336] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 1032.636693][T17336] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 1032.847319][T17336] Memory cgroup stats for /syz1: [ 1032.847753][T17336] cache 0 [ 1032.850014][T17383] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.853135][T17336] rss 0 [ 1032.853148][T17336] shmem 0 [ 1032.871660][T17336] mapped_file 0 [ 1032.875127][T17336] dirty 0 [ 1032.878114][T17336] writeback 0 [ 1032.881444][T17336] workingset_refault_anon 834 [ 1032.886127][T17336] workingset_refault_file 5703 [ 1032.890926][T17336] swap 208896 [ 1032.894312][T17336] swapcached 49152 [ 1032.898091][T17336] pgpgin 944059 [ 1032.901716][T17336] pgpgout 944047 [ 1032.905416][T17336] pgfault 881486 [ 1032.909083][T17336] pgmajfault 616 [ 1032.912747][T17336] inactive_anon 0 [ 1032.916393][T17336] active_anon 49152 [ 1032.920222][T17336] inactive_file 0 [ 1032.924293][T17336] active_file 0 [ 1032.927774][T17336] unevictable 0 [ 1032.931231][T17336] hierarchical_memory_limit 314572800 [ 1032.936608][T17336] hierarchical_memsw_limit 9223372036854771712 [ 1032.942786][T17336] total_cache 0 [ 1032.946252][T17336] total_rss 0 [ 1032.949577][T17336] total_shmem 0 [ 1032.953033][T17336] total_mapped_file 0 [ 1032.957005][T17336] total_dirty 0 [ 1032.960512][T17336] total_writeback 0 [ 1032.964332][T17336] total_workingset_refault_anon 834 [ 1032.969606][T17336] total_workingset_refault_file 5703 [ 1032.974881][T17336] total_swap 208896 [ 1032.978697][T17336] total_swapcached 49152 [ 1032.982937][T17336] total_pgpgin 944059 [ 1032.986907][T17336] total_pgpgout 944047 [ 1032.991057][T17336] total_pgfault 881486 [ 1032.995144][T17336] total_pgmajfault 616 [ 1032.999212][T17336] total_inactive_anon 0 [ 1033.003362][T17336] total_active_anon 49152 [ 1033.007770][T17336] total_inactive_file 0 [ 1033.011961][T17336] total_active_file 0 [ 1033.015946][T17336] total_unevictable 0 [ 1033.019948][T17336] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16754,pid=17336,uid=0 [ 1033.034734][T17336] Memory cgroup out of memory: Killed process 17336 (syz.1.16754) total-vm:93968kB, anon-rss:1196kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1033.115411][T17383] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.246734][T16023] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.308247][T16023] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.328291][T17414] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1033.342531][T17414] net_ratelimit: 162 callbacks suppressed [ 1033.342544][T17414] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1033.372171][T16023] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.413086][T16023] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.469419][T17426] netlink: zone id is out of range [ 1033.474567][T17426] netlink: zone id is out of range [ 1033.484680][T17426] netlink: zone id is out of range [ 1033.489948][T17426] netlink: zone id is out of range [ 1033.495176][T17426] netlink: zone id is out of range [ 1033.500412][T17426] netlink: zone id is out of range [ 1033.505564][T17426] netlink: zone id is out of range [ 1033.526473][T17426] netlink: zone id is out of range [ 1033.531742][T17426] netlink: zone id is out of range [ 1033.813243][T17449] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.894490][T17458] lo speed is unknown, defaulting to 1000 [ 1033.906214][T17449] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.967981][T17458] lo speed is unknown, defaulting to 1000 [ 1034.019423][T17449] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.111093][T17449] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.337633][T17429] syz.2.16791 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1034.352002][T17429] CPU: 1 UID: 0 PID: 17429 Comm: syz.2.16791 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1034.352034][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1034.352066][T17429] Call Trace: [ 1034.352074][T17429] [ 1034.352084][T17429] __dump_stack+0x1d/0x30 [ 1034.352185][T17429] dump_stack_lvl+0x95/0xd0 [ 1034.352207][T17429] dump_stack+0x15/0x1b [ 1034.352232][T17429] dump_header+0x81/0x240 [ 1034.352256][T17429] oom_kill_process+0x295/0x350 [ 1034.352312][T17429] out_of_memory+0x97b/0xb80 [ 1034.352371][T17429] try_charge_memcg+0x610/0xa10 [ 1034.352420][T17429] obj_cgroup_charge_pages+0xa6/0x150 [ 1034.352482][T17429] __memcg_kmem_charge_page+0x9f/0x170 [ 1034.352566][T17429] __alloc_frozen_pages_noprof+0x18f/0x360 [ 1034.352658][T17429] alloc_pages_mpol+0xb3/0x260 [ 1034.352759][T17429] alloc_pages_noprof+0x90/0x130 [ 1034.352795][T17429] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 1034.352875][T17429] __kvmalloc_node_noprof+0x492/0x6b0 [ 1034.352900][T17429] ? ip_set_alloc+0x24/0x30 [ 1034.352927][T17429] ? ip_set_alloc+0x24/0x30 [ 1034.352974][T17429] ip_set_alloc+0x24/0x30 [ 1034.353007][T17429] hash_netiface_create+0x282/0x740 [ 1034.353042][T17429] ? __pfx_hash_netiface_create+0x10/0x10 [ 1034.353070][T17429] ip_set_create+0x3cc/0x970 [ 1034.353143][T17429] ? __nla_parse+0x40/0x60 [ 1034.353171][T17429] nfnetlink_rcv_msg+0x4c6/0x590 [ 1034.353218][T17429] netlink_rcv_skb+0x123/0x220 [ 1034.353252][T17429] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1034.353288][T17429] nfnetlink_rcv+0x167/0x16c0 [ 1034.353392][T17429] ? update_curr+0x2c/0x150 [ 1034.353435][T17429] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 1034.353474][T17429] ? probe_sched_wakeup+0x85/0xa0 [ 1034.353577][T17429] ? ttwu_do_activate+0x1d3/0x210 [ 1034.353608][T17429] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 1034.353728][T17429] ? try_to_wake_up+0x3f6/0x640 [ 1034.353754][T17429] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1034.353792][T17429] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 1034.353820][T17429] ? kmem_cache_free+0xe3/0x3a0 [ 1034.353848][T17429] ? update_load_avg+0x1da/0x820 [ 1034.353868][T17429] ? __list_add_valid_or_report+0x38/0xe0 [ 1034.353975][T17429] ? should_fail_ex+0x30/0x280 [ 1034.354004][T17429] ? __netlink_lookup+0xf5/0x2a0 [ 1034.354043][T17429] ? __rcu_read_unlock+0x34/0x70 [ 1034.354078][T17429] ? __netlink_lookup+0x266/0x2a0 [ 1034.354123][T17429] netlink_unicast+0x5c0/0x690 [ 1034.354156][T17429] netlink_sendmsg+0x58b/0x6b0 [ 1034.354219][T17429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1034.354283][T17429] __sock_sendmsg+0x145/0x180 [ 1034.354308][T17429] ____sys_sendmsg+0x31e/0x4a0 [ 1034.354345][T17429] ___sys_sendmsg+0x17b/0x1d0 [ 1034.354390][T17429] __x64_sys_sendmsg+0xd4/0x160 [ 1034.354427][T17429] x64_sys_call+0x17ba/0x3000 [ 1034.354495][T17429] do_syscall_64+0xca/0x2b0 [ 1034.354530][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.354556][T17429] RIP: 0033:0x7f7fc191f749 [ 1034.354577][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.354665][T17429] RSP: 002b:00007f7fc037f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.354693][T17429] RAX: ffffffffffffffda RBX: 00007f7fc1b75fa0 RCX: 00007f7fc191f749 [ 1034.354706][T17429] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1034.354719][T17429] RBP: 00007f7fc19a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1034.354734][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.354804][T17429] R13: 00007f7fc1b76038 R14: 00007f7fc1b75fa0 R15: 00007ffdd5b96988 [ 1034.354826][T17429] [ 1034.354835][T17429] memory: usage 307200kB, limit 307200kB, failcnt 1980 [ 1034.714540][T17429] memory+swap: usage 307516kB, limit 9007199254740988kB, failcnt 0 [ 1034.722531][T17429] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 1034.729885][T17429] Memory cgroup stats for /syz2: [ 1034.730611][T17429] cache 4096 [ 1034.738841][T17429] rss 4096 [ 1034.742022][T17429] shmem 0 [ 1034.745108][T17429] mapped_file 4096 [ 1034.749083][T17429] dirty 0 [ 1034.752055][T17429] writeback 0 [ 1034.755345][T17429] workingset_refault_anon 664 [ 1034.760073][T17429] workingset_refault_file 3234 [ 1034.764857][T17429] swap 323584 [ 1034.768226][T17429] swapcached 69632 [ 1034.771967][T17429] pgpgin 901215 [ 1034.775440][T17429] pgpgout 901197 [ 1034.779030][T17429] pgfault 888699 [ 1034.782584][T17429] pgmajfault 262 [ 1034.786122][T17429] inactive_anon 69632 [ 1034.790145][T17429] active_anon 0 [ 1034.793654][T17429] inactive_file 4096 [ 1034.797604][T17429] active_file 0 [ 1034.801477][T17429] unevictable 0 [ 1034.805035][T17429] hierarchical_memory_limit 314572800 [ 1034.810502][T17429] hierarchical_memsw_limit 9223372036854771712 [ 1034.816751][T17429] total_cache 4096 [ 1034.820562][T17429] total_rss 4096 [ 1034.824101][T17429] total_shmem 0 [ 1034.827571][T17429] total_mapped_file 4096 [ 1034.831818][T17429] total_dirty 0 [ 1034.835290][T17429] total_writeback 0 [ 1034.839248][T17429] total_workingset_refault_anon 664 [ 1034.844530][T17429] total_workingset_refault_file 3234 [ 1034.849870][T17429] total_swap 323584 [ 1034.853711][T17429] total_swapcached 69632 [ 1034.858080][T17429] total_pgpgin 901215 [ 1034.862055][T17429] total_pgpgout 901197 [ 1034.866180][T17429] total_pgfault 888699 [ 1034.870309][T17429] total_pgmajfault 262 [ 1034.874380][T17429] total_inactive_anon 69632 [ 1034.878962][T17429] total_active_anon 0 [ 1034.882943][T17429] total_inactive_file 4096 [ 1034.887395][T17429] total_active_file 0 [ 1034.891378][T17429] total_unevictable 0 [ 1034.895371][T17429] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.16791,pid=17428,uid=0 [ 1034.910176][T17429] Memory cgroup out of memory: Killed process 17428 (syz.2.16791) total-vm:93968kB, anon-rss:1260kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1035.221857][T17493] tipc: Enabling of bearer rejected, already enabled [ 1035.359300][T17501] tipc: Enabling of bearer rejected, already enabled [ 1035.823467][T17521] syz.5.16828 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1035.837751][T17521] CPU: 0 UID: 0 PID: 17521 Comm: syz.5.16828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1035.837818][T17521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1035.837833][T17521] Call Trace: [ 1035.837843][T17521] [ 1035.837852][T17521] __dump_stack+0x1d/0x30 [ 1035.837905][T17521] dump_stack_lvl+0x95/0xd0 [ 1035.837932][T17521] dump_stack+0x15/0x1b [ 1035.837956][T17521] dump_header+0x81/0x240 [ 1035.837979][T17521] oom_kill_process+0x295/0x350 [ 1035.838001][T17521] out_of_memory+0x97b/0xb80 [ 1035.838103][T17521] try_charge_memcg+0x610/0xa10 [ 1035.838151][T17521] obj_cgroup_charge_pages+0xa6/0x150 [ 1035.838200][T17521] __memcg_kmem_charge_page+0x9f/0x170 [ 1035.838228][T17521] __alloc_frozen_pages_noprof+0x18f/0x360 [ 1035.838338][T17521] alloc_pages_mpol+0xb3/0x260 [ 1035.838434][T17521] alloc_pages_noprof+0x90/0x130 [ 1035.838454][T17521] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 1035.838480][T17521] __kvmalloc_node_noprof+0x492/0x6b0 [ 1035.838546][T17521] ? ip_set_alloc+0x24/0x30 [ 1035.838574][T17521] ? ip_set_alloc+0x24/0x30 [ 1035.838653][T17521] ip_set_alloc+0x24/0x30 [ 1035.838678][T17521] hash_netiface_create+0x282/0x740 [ 1035.838699][T17521] ? __pfx_hash_netiface_create+0x10/0x10 [ 1035.838720][T17521] ip_set_create+0x3cc/0x970 [ 1035.838818][T17521] ? __nla_parse+0x40/0x60 [ 1035.838836][T17521] nfnetlink_rcv_msg+0x4c6/0x590 [ 1035.838879][T17521] netlink_rcv_skb+0x123/0x220 [ 1035.838950][T17521] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1035.838971][T17521] nfnetlink_rcv+0x167/0x16c0 [ 1035.839044][T17521] ? kmem_cache_free+0xe3/0x3a0 [ 1035.839061][T17521] ? __kfree_skb+0x109/0x150 [ 1035.839077][T17521] ? nlmon_xmit+0x4f/0x60 [ 1035.839096][T17521] ? consume_skb+0x49/0x150 [ 1035.839183][T17521] ? nlmon_xmit+0x4f/0x60 [ 1035.839197][T17521] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1035.839217][T17521] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 1035.839235][T17521] ? __dev_queue_xmit+0x148/0x1ee0 [ 1035.839275][T17521] ? ref_tracker_free+0x37d/0x3e0 [ 1035.839294][T17521] ? __netlink_deliver_tap+0x4dc/0x500 [ 1035.839317][T17521] netlink_unicast+0x5c0/0x690 [ 1035.839347][T17521] netlink_sendmsg+0x58b/0x6b0 [ 1035.839368][T17521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.839389][T17521] __sock_sendmsg+0x145/0x180 [ 1035.839439][T17521] ____sys_sendmsg+0x31e/0x4a0 [ 1035.839474][T17521] ___sys_sendmsg+0x17b/0x1d0 [ 1035.839500][T17521] __x64_sys_sendmsg+0xd4/0x160 [ 1035.839567][T17521] x64_sys_call+0x17ba/0x3000 [ 1035.839584][T17521] do_syscall_64+0xca/0x2b0 [ 1035.839621][T17521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.839644][T17521] RIP: 0033:0x7f0b5830f749 [ 1035.839657][T17521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1035.839747][T17521] RSP: 002b:00007f0b56d77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.839763][T17521] RAX: ffffffffffffffda RBX: 00007f0b58565fa0 RCX: 00007f0b5830f749 [ 1035.839772][T17521] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1035.839781][T17521] RBP: 00007f0b58393f91 R08: 0000000000000000 R09: 0000000000000000 [ 1035.839790][T17521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.839798][T17521] R13: 00007f0b58566038 R14: 00007f0b58565fa0 R15: 00007fff438328e8 [ 1035.839811][T17521] [ 1035.839880][T17521] memory: usage 307200kB, limit 307200kB, failcnt 4096 [ 1036.169292][T17521] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 1036.177308][T17521] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 1036.184599][T17521] Memory cgroup stats for /syz5: [ 1036.184809][T17521] cache 0 [ 1036.192740][T17521] rss 4096 [ 1036.195783][T17521] shmem 0 [ 1036.198709][T17521] mapped_file 0 [ 1036.202166][T17521] dirty 0 [ 1036.205091][T17521] writeback 0 [ 1036.208393][T17521] workingset_refault_anon 816 [ 1036.213079][T17521] workingset_refault_file 3199 [ 1036.217913][T17521] swap 180224 [ 1036.221204][T17521] swapcached 36864 [ 1036.225113][T17521] pgpgin 803091 [ 1036.228975][T17521] pgpgout 803082 [ 1036.232538][T17521] pgfault 833727 [ 1036.236160][T17521] pgmajfault 420 [ 1036.239719][T17521] inactive_anon 36864 [ 1036.243716][T17521] active_anon 0 [ 1036.247654][T17521] inactive_file 0 [ 1036.251287][T17521] active_file 0 [ 1036.254741][T17521] unevictable 0 [ 1036.258280][T17521] hierarchical_memory_limit 314572800 [ 1036.263687][T17521] hierarchical_memsw_limit 9223372036854771712 [ 1036.269958][T17521] total_cache 0 [ 1036.273450][T17521] total_rss 4096 [ 1036.277033][T17521] total_shmem 0 [ 1036.280503][T17521] total_mapped_file 0 [ 1036.284499][T17521] total_dirty 0 [ 1036.288043][T17521] total_writeback 0 [ 1036.290042][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 1036.290058][ T29] audit: type=1400 audit(1767393684.352:196418): avc: denied { create } for pid=17526 comm="syz.2.16830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.291862][T17521] total_workingset_refault_anon 816 [ 1036.291876][T17521] total_workingset_refault_file 3199 [ 1036.291886][T17521] total_swap 180224 [ 1036.291895][T17521] total_swapcached 36864 [ 1036.298073][ T29] audit: type=1400 audit(1767393684.352:196419): avc: denied { connect } for pid=17526 comm="syz.2.16830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.317955][T17521] total_pgpgin 803091 [ 1036.318029][T17521] total_pgpgout 803082 [ 1036.318039][T17521] total_pgfault 833727 [ 1036.318048][T17521] total_pgmajfault 420 [ 1036.318058][T17521] total_inactive_anon 36864 [ 1036.318066][T17521] total_active_anon 0 [ 1036.318076][T17521] total_inactive_file 0 [ 1036.318105][T17521] total_active_file 0 [ 1036.318114][T17521] total_unevictable 0 [ 1036.318125][T17521] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1036.323479][ T29] audit: type=1400 audit(1767393684.352:196420): avc: denied { setopt } for pid=17526 comm="syz.2.16830" lport=38707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.328659][T17521] ,cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.16828,pid=17520,uid=0 [ 1036.332587][ T29] audit: type=1400 audit(1767393684.352:196421): avc: denied { write } for pid=17526 comm="syz.2.16830" lport=38707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1036.336853][T17521] Memory cgroup out of memory: Killed process 17520 (syz.5.16828) total-vm:93896kB, anon-rss:1132kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1036.356834][ T29] audit: type=1400 audit(1767393684.362:196422): avc: denied { create } for pid=17526 comm="syz.2.16830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1036.490509][ T29] audit: type=1400 audit(1767393684.362:196423): avc: denied { setopt } for pid=17526 comm="syz.2.16830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1036.510720][ T29] audit: type=1400 audit(1767393684.362:196424): avc: denied { bind } for pid=17526 comm="syz.2.16830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1036.530604][ T29] audit: type=1326 audit(1767393684.362:196425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17526 comm="syz.2.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc191f749 code=0x7ffc0000 [ 1036.554570][ T29] audit: type=1326 audit(1767393684.362:196426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17526 comm="syz.2.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7fc191f749 code=0x7ffc0000 [ 1036.578595][ T29] audit: type=1326 audit(1767393684.362:196427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17526 comm="syz.2.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc191f749 code=0x7ffc0000 [ 1036.636858][T17534] __nla_validate_parse: 29 callbacks suppressed [ 1036.636880][T17534] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.16833'. [ 1036.730749][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16835'. [ 1036.739865][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16835'. [ 1036.751352][T17535] tipc: Enabling of bearer rejected, already enabled [ 1036.820797][T17550] netlink: 3 bytes leftover after parsing attributes in process `syz.5.16841'. [ 1036.829984][T17550] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1037.224405][ T7334] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.243338][ T7334] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.260217][ T7334] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.294829][ T7334] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.357735][T17541] syz.1.16837 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1037.372003][T17541] CPU: 1 UID: 0 PID: 17541 Comm: syz.1.16837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1037.372070][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1037.372087][T17541] Call Trace: [ 1037.372101][T17541] [ 1037.372111][T17541] __dump_stack+0x1d/0x30 [ 1037.372220][T17541] dump_stack_lvl+0x95/0xd0 [ 1037.372247][T17541] dump_stack+0x15/0x1b [ 1037.372270][T17541] dump_header+0x81/0x240 [ 1037.372291][T17541] oom_kill_process+0x295/0x350 [ 1037.372315][T17541] out_of_memory+0x97b/0xb80 [ 1037.372341][T17541] try_charge_memcg+0x610/0xa10 [ 1037.372386][T17541] obj_cgroup_charge_pages+0xa6/0x150 [ 1037.372439][T17541] __memcg_kmem_charge_page+0x9f/0x170 [ 1037.372514][T17541] __alloc_frozen_pages_noprof+0x18f/0x360 [ 1037.372611][T17541] alloc_pages_mpol+0xb3/0x260 [ 1037.372646][T17541] alloc_pages_noprof+0x90/0x130 [ 1037.372678][T17541] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 1037.372714][T17541] __kvmalloc_node_noprof+0x492/0x6b0 [ 1037.372742][T17541] ? ip_set_alloc+0x24/0x30 [ 1037.372829][T17541] ? ip_set_alloc+0x24/0x30 [ 1037.372888][T17541] ? __slab_alloc+0x25/0x50 [ 1037.372974][T17541] ip_set_alloc+0x24/0x30 [ 1037.373006][T17541] hash_netiface_create+0x282/0x740 [ 1037.373046][T17541] ? __pfx_hash_netiface_create+0x10/0x10 [ 1037.373077][T17541] ip_set_create+0x3cc/0x970 [ 1037.373169][T17541] ? __nla_parse+0x40/0x60 [ 1037.373200][T17541] nfnetlink_rcv_msg+0x4c6/0x590 [ 1037.373318][T17541] netlink_rcv_skb+0x123/0x220 [ 1037.373407][T17541] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1037.373488][T17541] nfnetlink_rcv+0x167/0x16c0 [ 1037.373517][T17541] ? kmem_cache_free+0xe3/0x3a0 [ 1037.373548][T17541] ? __kfree_skb+0x109/0x150 [ 1037.373646][T17541] ? nlmon_xmit+0x4f/0x60 [ 1037.373666][T17541] ? consume_skb+0x49/0x150 [ 1037.373695][T17541] ? nlmon_xmit+0x4f/0x60 [ 1037.373731][T17541] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1037.373772][T17541] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 1037.373876][T17541] ? __dev_queue_xmit+0x148/0x1ee0 [ 1037.373909][T17541] ? ref_tracker_free+0x37d/0x3e0 [ 1037.373939][T17541] ? __netlink_deliver_tap+0x4dc/0x500 [ 1037.373972][T17541] netlink_unicast+0x5c0/0x690 [ 1037.374062][T17541] netlink_sendmsg+0x58b/0x6b0 [ 1037.374170][T17541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.374201][T17541] __sock_sendmsg+0x145/0x180 [ 1037.374224][T17541] ____sys_sendmsg+0x31e/0x4a0 [ 1037.374283][T17541] ___sys_sendmsg+0x17b/0x1d0 [ 1037.374330][T17541] __x64_sys_sendmsg+0xd4/0x160 [ 1037.374366][T17541] x64_sys_call+0x17ba/0x3000 [ 1037.374471][T17541] do_syscall_64+0xca/0x2b0 [ 1037.374514][T17541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.374620][T17541] RIP: 0033:0x7f5822b9f749 [ 1037.374638][T17541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.374656][T17541] RSP: 002b:00007f5821607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.374715][T17541] RAX: ffffffffffffffda RBX: 00007f5822df5fa0 RCX: 00007f5822b9f749 [ 1037.374728][T17541] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1037.374741][T17541] RBP: 00007f5822c23f91 R08: 0000000000000000 R09: 0000000000000000 [ 1037.374753][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.374767][T17541] R13: 00007f5822df6038 R14: 00007f5822df5fa0 R15: 00007ffedeba3448 [ 1037.374813][T17541] [ 1037.374821][T17541] memory: usage 307200kB, limit 307200kB, failcnt 5413 [ 1037.517239][T17570] tipc: Enabling of bearer rejected, already enabled [ 1037.519308][T17541] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1037.689405][T17574] netlink: 'syz.4.16850': attribute type 9 has an invalid length. [ 1037.694403][T17541] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 1037.702445][T17574] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.16850'. [ 1037.705591][T17541] Memory cgroup stats for [ 1037.739937][T17576] netlink: 'syz.2.16849': attribute type 9 has an invalid length. [ 1037.743053][T17541] /syz1: [ 1037.743911][T17541] cache 0 [ 1037.752396][T17576] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.16849'. [ 1037.756833][T17541] rss 4096 [ 1037.756845][T17541] shmem 0 [ 1037.756852][T17541] mapped_file 0 [ 1037.756859][T17541] dirty 0 [ 1037.756866][T17541] writeback 0 [ 1037.795815][T17541] workingset_refault_anon 914 [ 1037.800719][T17541] workingset_refault_file 6384 [ 1037.805680][T17541] swap 196608 [ 1037.809032][T17541] swapcached 77824 [ 1037.812835][T17541] pgpgin 946922 [ 1037.816347][T17541] pgpgout 946903 [ 1037.819908][T17541] pgfault 888653 [ 1037.823460][T17541] pgmajfault 677 [ 1037.827229][T17541] inactive_anon 77824 [ 1037.831218][T17541] active_anon 0 [ 1037.834766][T17541] inactive_file 0 [ 1037.838492][T17541] active_file 0 [ 1037.841962][T17541] unevictable 0 [ 1037.845555][T17541] hierarchical_memory_limit 314572800 [ 1037.851004][T17541] hierarchical_memsw_limit 9223372036854771712 [ 1037.857247][T17541] total_cache 0 [ 1037.860717][T17541] total_rss 4096 [ 1037.864312][T17541] total_shmem 0 [ 1037.867817][T17541] total_mapped_file 0 [ 1037.871804][T17541] total_dirty 0 [ 1037.875390][T17541] total_writeback 0 [ 1037.879292][T17541] total_workingset_refault_anon 914 [ 1037.884499][T17541] total_workingset_refault_file 6384 [ 1037.889891][T17541] total_swap 196608 [ 1037.893714][T17541] total_swapcached 77824 [ 1037.898021][T17541] total_pgpgin 946922 [ 1037.902047][T17541] total_pgpgout 946903 [ 1037.906188][T17541] total_pgfault 888653 [ 1037.910372][T17541] total_pgmajfault 677 [ 1037.914482][T17541] total_inactive_anon 77824 [ 1037.919159][T17541] total_active_anon 0 [ 1037.923184][T17541] total_inactive_file 0 [ 1037.927396][T17541] total_active_file 0 [ 1037.931542][T17541] total_unevictable 0 [ 1037.935724][T17541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16837,pid=17539,uid=0 [ 1037.950733][T17541] Memory cgroup out of memory: Killed process 17539 (syz.1.16837) total-vm:96016kB, anon-rss:1132kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1038.179788][T17591] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.16856'. [ 1038.206130][T17596] warn_alloc: 2 callbacks suppressed [ 1038.206216][T17596] syz.2.16858: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1038.226447][T17596] CPU: 0 UID: 0 PID: 17596 Comm: syz.2.16858 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1038.226520][T17596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1038.226535][T17596] Call Trace: [ 1038.226541][T17596] [ 1038.226549][T17596] __dump_stack+0x1d/0x30 [ 1038.226590][T17596] dump_stack_lvl+0x95/0xd0 [ 1038.226678][T17596] dump_stack+0x15/0x1b [ 1038.226701][T17596] warn_alloc+0x12b/0x1a0 [ 1038.226729][T17596] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 1038.226759][T17596] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1038.226857][T17596] __vmalloc_node_range_noprof+0xa0/0x1310 [ 1038.226890][T17596] ? update_load_avg+0x1da/0x820 [ 1038.226917][T17596] ? __set_next_task_fair+0x5b/0x150 [ 1038.226978][T17596] ? pick_next_task_fair+0x67c/0x6e0 [ 1038.227005][T17596] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 1038.227058][T17596] ? _raw_spin_unlock+0x26/0x50 [ 1038.227083][T17596] ? finish_task_switch+0x7a/0x2a0 [ 1038.227159][T17596] ? should_fail_ex+0x30/0x280 [ 1038.227230][T17596] ? should_failslab+0x8c/0xb0 [ 1038.227252][T17596] vmalloc_user_noprof+0x7d/0xb0 [ 1038.227347][T17596] ? xskq_create+0x80/0xe0 [ 1038.227379][T17596] xskq_create+0x80/0xe0 [ 1038.227446][T17596] xsk_init_queue+0x95/0xf0 [ 1038.227540][T17596] xsk_setsockopt+0x3f5/0x640 [ 1038.227648][T17596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1038.227762][T17596] __sys_setsockopt+0x184/0x200 [ 1038.227930][T17596] __x64_sys_setsockopt+0x64/0x80 [ 1038.227959][T17596] x64_sys_call+0x21d5/0x3000 [ 1038.227990][T17596] do_syscall_64+0xca/0x2b0 [ 1038.228083][T17596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.228110][T17596] RIP: 0033:0x7f7fc191f749 [ 1038.228129][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.228148][T17596] RSP: 002b:00007f7fc037f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1038.228171][T17596] RAX: ffffffffffffffda RBX: 00007f7fc1b75fa0 RCX: 00007f7fc191f749 [ 1038.228187][T17596] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1038.228277][T17596] RBP: 00007f7fc19a3f91 R08: 0000000000000004 R09: 0000000000000000 [ 1038.228290][T17596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.228303][T17596] R13: 00007f7fc1b76038 R14: 00007f7fc1b75fa0 R15: 00007ffdd5b96988 [ 1038.228322][T17596] [ 1038.228330][T17596] Mem-Info: [ 1038.230678][T17585] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16854'. [ 1038.238264][T17596] active_anon:3487 inactive_anon:53 isolated_anon:0 [ 1038.238264][T17596] active_file:8767 inactive_file:2854 isolated_file:0 [ 1038.238264][T17596] unevictable:0 dirty:78 writeback:23 [ 1038.238264][T17596] slab_reclaimable:3465 slab_unreclaimable:60166 [ 1038.238264][T17596] mapped:29154 shmem:177 pagetables:1035 [ 1038.238264][T17596] sec_pagetables:0 bounce:0 [ 1038.238264][T17596] kernel_misc_reclaimable:0 [ 1038.238264][T17596] free:1748428 free_pcp:64208 free_cma:0 [ 1038.517550][T17596] Node 0 active_anon:13916kB inactive_anon:228kB active_file:35116kB inactive_file:11376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120788kB dirty:364kB writeback:0kB shmem:624kB kernel_stack:4832kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1038.544993][T17596] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.574725][T17596] lowmem_reserve[]: 0 2880 7859 7859 [ 1038.580162][T17596] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 1038.611689][T17596] lowmem_reserve[]: 0 0 4978 4978 [ 1038.616884][T17596] Node 0 Normal free:4225068kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13916kB inactive_anon:228kB active_file:35116kB inactive_file:11376kB unevictable:0kB writepending:356kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:247916kB local_pcp:30236kB free_cma:0kB [ 1038.650429][T17596] lowmem_reserve[]: 0 0 0 0 [ 1038.655081][T17596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1038.667843][T17596] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 1038.684073][T17596] Node 0 Normal: 3529*4kB (UME) 1636*8kB (UME) 1948*16kB (UME) 2665*32kB (UME) 2042*64kB (UME) 1381*128kB (UME) 966*256kB (UME) 806*512kB (UME) 639*1024kB (UM) 477*2048kB (UM) 362*4096kB (UM) = 4225060kB [ 1038.704360][T17596] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1038.713703][T17596] 11815 total pagecache pages [ 1038.718426][T17596] 39 pages in swap cache [ 1038.722682][T17596] Free swap = 124676kB [ 1038.726877][T17596] Total swap = 124996kB [ 1038.731058][T17596] 2097051 pages RAM [ 1038.734901][T17596] 0 pages HighMem/MovableOnly [ 1038.739671][T17596] 81272 pages reserved [ 1038.814670][T17604] lo speed is unknown, defaulting to 1000 [ 1038.820951][T17604] lo speed is unknown, defaulting to 1000 [ 1038.959071][T17614] lo speed is unknown, defaulting to 1000 [ 1038.965977][T17614] lo speed is unknown, defaulting to 1000 [ 1039.121516][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16861'. [ 1039.826405][T17632] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.16869'. [ 1040.295047][T17651] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.350328][T17651] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.377268][T17654] lo speed is unknown, defaulting to 1000 [ 1040.388989][T17654] lo speed is unknown, defaulting to 1000 [ 1040.399578][T17651] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.465394][T17651] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.141925][T17667] syz.1.16881 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1041.156232][T17667] CPU: 1 UID: 0 PID: 17667 Comm: syz.1.16881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1041.156264][T17667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1041.156380][T17667] Call Trace: [ 1041.156389][T17667] [ 1041.156399][T17667] __dump_stack+0x1d/0x30 [ 1041.156427][T17667] dump_stack_lvl+0x95/0xd0 [ 1041.156506][T17667] dump_stack+0x15/0x1b [ 1041.156531][T17667] dump_header+0x81/0x240 [ 1041.156557][T17667] oom_kill_process+0x295/0x350 [ 1041.156580][T17667] out_of_memory+0x97b/0xb80 [ 1041.156685][T17667] try_charge_memcg+0x610/0xa10 [ 1041.156728][T17667] obj_cgroup_charge_pages+0xa6/0x150 [ 1041.156759][T17667] __memcg_kmem_charge_page+0x9f/0x170 [ 1041.156788][T17667] __alloc_frozen_pages_noprof+0x18f/0x360 [ 1041.156828][T17667] alloc_pages_mpol+0xb3/0x260 [ 1041.156856][T17667] alloc_pages_noprof+0x90/0x130 [ 1041.156893][T17667] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 1041.156948][T17667] __kvmalloc_node_noprof+0x492/0x6b0 [ 1041.157041][T17667] ? ip_set_alloc+0x24/0x30 [ 1041.157076][T17667] ? ip_set_alloc+0x24/0x30 [ 1041.157155][T17667] ip_set_alloc+0x24/0x30 [ 1041.157202][T17667] hash_netiface_create+0x282/0x740 [ 1041.157235][T17667] ? __pfx_hash_netiface_create+0x10/0x10 [ 1041.157287][T17667] ip_set_create+0x3cc/0x970 [ 1041.157326][T17667] ? __nla_parse+0x40/0x60 [ 1041.157356][T17667] nfnetlink_rcv_msg+0x4c6/0x590 [ 1041.157483][T17667] netlink_rcv_skb+0x123/0x220 [ 1041.157519][T17667] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1041.157556][T17667] nfnetlink_rcv+0x167/0x16c0 [ 1041.157620][T17667] ? kmem_cache_free+0xe3/0x3a0 [ 1041.157651][T17667] ? __kfree_skb+0x109/0x150 [ 1041.157681][T17667] ? nlmon_xmit+0x4f/0x60 [ 1041.157784][T17667] ? consume_skb+0x49/0x150 [ 1041.157814][T17667] ? nlmon_xmit+0x4f/0x60 [ 1041.157857][T17667] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1041.157885][T17667] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 1041.157971][T17667] ? __dev_queue_xmit+0x148/0x1ee0 [ 1041.158007][T17667] ? ref_tracker_free+0x37d/0x3e0 [ 1041.158074][T17667] ? __netlink_deliver_tap+0x4dc/0x500 [ 1041.158181][T17667] netlink_unicast+0x5c0/0x690 [ 1041.158210][T17667] netlink_sendmsg+0x58b/0x6b0 [ 1041.158247][T17667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.158315][T17667] __sock_sendmsg+0x145/0x180 [ 1041.158334][T17667] ____sys_sendmsg+0x31e/0x4a0 [ 1041.158415][T17667] ___sys_sendmsg+0x17b/0x1d0 [ 1041.158469][T17667] __x64_sys_sendmsg+0xd4/0x160 [ 1041.158610][T17667] x64_sys_call+0x17ba/0x3000 [ 1041.158639][T17667] do_syscall_64+0xca/0x2b0 [ 1041.158699][T17667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.158724][T17667] RIP: 0033:0x7f5822b9f749 [ 1041.158753][T17667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.158774][T17667] RSP: 002b:00007f5821607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.158918][T17667] RAX: ffffffffffffffda RBX: 00007f5822df5fa0 RCX: 00007f5822b9f749 [ 1041.158933][T17667] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1041.158948][T17667] RBP: 00007f5822c23f91 R08: 0000000000000000 R09: 0000000000000000 [ 1041.158962][T17667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.158976][T17667] R13: 00007f5822df6038 R14: 00007f5822df5fa0 R15: 00007ffedeba3448 [ 1041.158998][T17667] [ 1041.159006][T17667] memory: usage 307200kB, limit 307200kB, failcnt 5864 [ 1041.490167][T17667] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 1041.498184][T17667] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 1041.505555][T17667] Memory cgroup stats for /syz1: [ 1041.506381][T17680] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1041.509188][T17667] cache 0 [ 1041.519175][T17667] rss 0 [ 1041.521954][T17667] shmem 0 [ 1041.524965][T17667] mapped_file 0 [ 1041.528690][T17667] dirty 0 [ 1041.531862][T17667] writeback 0 [ 1041.535216][T17667] workingset_refault_anon 1021 [ 1041.540094][T17667] workingset_refault_file 6689 [ 1041.544950][T17667] swap 208896 [ 1041.548270][T17667] swapcached 49152 [ 1041.552069][T17667] pgpgin 947690 [ 1041.555604][T17667] pgpgout 947678 [ 1041.559180][T17667] pgfault 889570 [ 1041.562744][T17667] pgmajfault 750 [ 1041.566328][T17667] inactive_anon 49152 [ 1041.570420][T17667] active_anon 0 [ 1041.573948][T17667] inactive_file 0 [ 1041.577604][T17667] active_file 0 [ 1041.581074][T17667] unevictable 0 [ 1041.584568][T17667] hierarchical_memory_limit 314572800 [ 1041.590037][T17667] hierarchical_memsw_limit 9223372036854771712 [ 1041.596216][T17667] total_cache 0 [ 1041.599695][T17667] total_rss 0 [ 1041.603072][T17667] total_shmem 0 [ 1041.606548][T17667] total_mapped_file 0 [ 1041.610573][T17667] total_dirty 0 [ 1041.614171][T17667] total_writeback 0 [ 1041.618003][T17667] total_workingset_refault_anon 1021 [ 1041.623358][T17667] total_workingset_refault_file 6689 [ 1041.628728][T17667] total_swap 208896 [ 1041.632529][T17667] total_swapcached 49152 [ 1041.636807][T17667] total_pgpgin 947690 [ 1041.640777][T17667] total_pgpgout 947678 [ 1041.644987][T17667] total_pgfault 889570 [ 1041.649161][T17667] total_pgmajfault 750 [ 1041.653269][T17667] total_inactive_anon 49152 [ 1041.657837][T17667] total_active_anon 0 [ 1041.661843][T17667] total_inactive_file 0 [ 1041.666160][T17667] total_active_file 0 [ 1041.670163][T17667] total_unevictable 0 [ 1041.674194][T17667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16881,pid=17666,uid=0 [ 1041.689113][T17667] Memory cgroup out of memory: Killed process 17666 (syz.1.16881) total-vm:96016kB, anon-rss:1132kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1041.715224][T17680] net_ratelimit: 102 callbacks suppressed [ 1041.715238][T17680] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1041.754949][T16046] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.786803][T16046] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.809631][T16046] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.834281][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 1041.834300][ T29] audit: type=1400 audit(1767393689.895:196869): avc: denied { map_create } for pid=17683 comm="syz.5.16888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.860075][ T29] audit: type=1400 audit(1767393689.905:196870): avc: denied { prog_load } for pid=17683 comm="syz.5.16888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.879491][ T29] audit: type=1400 audit(1767393689.915:196871): avc: denied { bpf } for pid=17683 comm="syz.5.16888" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1041.885832][T17687] netlink: 'syz.4.16890': attribute type 9 has an invalid length. [ 1041.900471][ T29] audit: type=1400 audit(1767393689.915:196872): avc: denied { perfmon } for pid=17683 comm="syz.5.16888" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1041.929635][T17687] __nla_validate_parse: 5 callbacks suppressed [ 1041.929653][T17687] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.16890'. [ 1041.945240][T16046] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.960101][ T29] audit: type=1400 audit(1767393689.915:196873): avc: denied { map_read map_write } for pid=17683 comm="syz.5.16888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.980923][ T29] audit: type=1400 audit(1767393690.025:196874): avc: denied { prog_run } for pid=17686 comm="syz.1.16889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1042.077011][ T29] audit: type=1400 audit(1767393690.075:196875): avc: denied { execmem } for pid=17685 comm="syz.4.16890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1042.096671][ T29] audit: type=1400 audit(1767393690.105:196876): avc: denied { name_bind } for pid=17690 comm="syz.2.16891" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1042.118693][ T29] audit: type=1400 audit(1767393690.115:196877): avc: denied { read write } for pid=17690 comm="syz.2.16891" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1042.143140][ T29] audit: type=1400 audit(1767393690.115:196878): avc: denied { open } for pid=17690 comm="syz.2.16891" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1042.306323][T17705] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.16895'. [ 1042.326979][T17705] netlink: zone id is out of range [ 1042.332221][T17705] netlink: zone id is out of range [ 1042.404189][T17711] lo speed is unknown, defaulting to 1000 [ 1042.410718][T17711] lo speed is unknown, defaulting to 1000 [ 1042.796310][T17705] netlink: zone id is out of range [ 1042.801596][T17705] netlink: zone id is out of range [ 1042.806851][T17705] netlink: zone id is out of range [ 1042.811979][T17705] netlink: zone id is out of range [ 1042.817247][T17705] netlink: zone id is out of range [ 1042.822580][T17705] netlink: zone id is out of range [ 1042.827748][T17705] netlink: zone id is out of range [ 1042.937350][T17721] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1042.956315][T17723] netlink: 3 bytes leftover after parsing attributes in process `syz.2.16901'. [ 1042.972326][T17723] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1043.403440][T17738] netlink: 'syz.5.16908': attribute type 9 has an invalid length. [ 1043.411345][T17738] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.16908'. [ 1043.434364][T17735] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.494580][T17735] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.558187][T17735] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.560401][T17742] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1043.624095][T17735] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.775930][T16034] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.805738][T16034] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.841104][T16034] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.858874][T16034] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.969376][T17753] netlink: 'syz.3.16913': attribute type 10 has an invalid length. [ 1043.977365][T17753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16913'. [ 1044.005179][T17753] batman_adv: batadv0: Adding interface: veth1_vlan [ 1044.016579][T17753] batman_adv: batadv0: Interface activated: veth1_vlan [ 1044.146682][T17768] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.216106][T17768] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.286599][T17768] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.356188][T17768] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.499823][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16925'. [ 1044.508893][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16925'. [ 1044.510346][T15991] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.566831][T15991] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.611447][T15991] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.634150][T15991] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.764192][T17798] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.16931'. [ 1044.990164][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16936'. [ 1044.999333][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16936'. [ 1045.044062][T17817] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1045.845088][T17851] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1046.684617][T17886] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1046.840554][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 1046.840572][ T29] audit: type=1326 audit(1767393694.917:197706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1046.905507][T17894] net_ratelimit: 191 callbacks suppressed [ 1046.905528][T17894] netlink: zone id is out of range [ 1046.916757][T17894] netlink: zone id is out of range [ 1046.921915][ T29] audit: type=1326 audit(1767393694.917:197707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1046.936820][T17894] netlink: zone id is out of range [ 1046.945740][ T29] audit: type=1326 audit(1767393694.917:197708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1046.950765][T17894] netlink: zone id is out of range [ 1046.950776][T17894] netlink: zone id is out of range [ 1046.950784][T17894] netlink: zone id is out of range [ 1046.974526][ T29] audit: type=1326 audit(1767393694.917:197709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91dcd11667 code=0x7ffc0000 [ 1046.979643][T17894] netlink: zone id is out of range [ 1046.984776][ T29] audit: type=1326 audit(1767393694.917:197710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f91dcd115dc code=0x7ffc0000 [ 1046.989876][T17894] netlink: zone id is out of range [ 1046.989886][T17894] netlink: zone id is out of range [ 1047.013563][ T29] audit: type=1326 audit(1767393694.917:197711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f91dcd11514 code=0x7ffc0000 [ 1047.013601][ T29] audit: type=1326 audit(1767393694.917:197712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f91dcd11514 code=0x7ffc0000 [ 1047.018718][T17894] netlink: zone id is out of range [ 1047.020053][T17896] __nla_validate_parse: 9 callbacks suppressed [ 1047.020131][T17896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16972'. [ 1047.042498][ T29] audit: type=1326 audit(1767393694.917:197713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91dcd0e3aa code=0x7ffc0000 [ 1047.076612][T17874] syz.3.16962 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1047.099987][ T29] audit: type=1326 audit(1767393694.917:197714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1047.100021][ T29] audit: type=1326 audit(1767393694.917:197715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.4.16970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1047.105193][T17874] CPU: 1 UID: 0 PID: 17874 Comm: syz.3.16962 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1047.105223][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.105236][T17874] Call Trace: [ 1047.105245][T17874] [ 1047.105255][T17874] __dump_stack+0x1d/0x30 [ 1047.105282][T17874] dump_stack_lvl+0x95/0xd0 [ 1047.105305][T17874] dump_stack+0x15/0x1b [ 1047.105368][T17874] dump_header+0x81/0x240 [ 1047.105397][T17874] oom_kill_process+0x295/0x350 [ 1047.105422][T17874] out_of_memory+0x97b/0xb80 [ 1047.105494][T17874] try_charge_memcg+0x610/0xa10 [ 1047.105535][T17874] obj_cgroup_charge_pages+0xa6/0x150 [ 1047.105565][T17874] __memcg_kmem_charge_page+0x9f/0x170 [ 1047.105595][T17874] __alloc_frozen_pages_noprof+0x18f/0x360 [ 1047.105681][T17874] alloc_pages_mpol+0xb3/0x260 [ 1047.105712][T17874] alloc_pages_noprof+0x90/0x130 [ 1047.105803][T17874] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 1047.105840][T17874] __kvmalloc_node_noprof+0x492/0x6b0 [ 1047.105906][T17874] ? ip_set_alloc+0x24/0x30 [ 1047.105936][T17874] ? ip_set_alloc+0x24/0x30 [ 1047.105967][T17874] ip_set_alloc+0x24/0x30 [ 1047.106010][T17874] hash_netiface_create+0x282/0x740 [ 1047.106046][T17874] ? __pfx_hash_netiface_create+0x10/0x10 [ 1047.106151][T17874] ip_set_create+0x3cc/0x970 [ 1047.106255][T17874] ? __nla_parse+0x40/0x60 [ 1047.106386][T17874] nfnetlink_rcv_msg+0x4c6/0x590 [ 1047.106431][T17874] netlink_rcv_skb+0x123/0x220 [ 1047.106494][T17874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1047.106526][T17874] nfnetlink_rcv+0x167/0x16c0 [ 1047.106550][T17874] ? kmem_cache_free+0xe3/0x3a0 [ 1047.106577][T17874] ? __kfree_skb+0x109/0x150 [ 1047.106658][T17874] ? nlmon_xmit+0x4f/0x60 [ 1047.106678][T17874] ? consume_skb+0x49/0x150 [ 1047.106748][T17874] ? nlmon_xmit+0x4f/0x60 [ 1047.106768][T17874] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1047.106807][T17874] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 1047.106855][T17874] ? __dev_queue_xmit+0x148/0x1ee0 [ 1047.107020][T17874] ? ref_tracker_free+0x37d/0x3e0 [ 1047.107053][T17874] ? __netlink_deliver_tap+0x4dc/0x500 [ 1047.107088][T17874] netlink_unicast+0x5c0/0x690 [ 1047.107193][T17874] netlink_sendmsg+0x58b/0x6b0 [ 1047.107292][T17874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.107482][T17874] __sock_sendmsg+0x145/0x180 [ 1047.107504][T17874] ____sys_sendmsg+0x31e/0x4a0 [ 1047.107535][T17874] ___sys_sendmsg+0x17b/0x1d0 [ 1047.107595][T17874] __x64_sys_sendmsg+0xd4/0x160 [ 1047.107629][T17874] x64_sys_call+0x17ba/0x3000 [ 1047.107714][T17874] do_syscall_64+0xca/0x2b0 [ 1047.107751][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.107803][T17874] RIP: 0033:0x7ff3c7e9f749 [ 1047.107822][T17874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.107842][T17874] RSP: 002b:00007ff3c6907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1047.107865][T17874] RAX: ffffffffffffffda RBX: 00007ff3c80f5fa0 RCX: 00007ff3c7e9f749 [ 1047.107944][T17874] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1047.107959][T17874] RBP: 00007ff3c7f23f91 R08: 0000000000000000 R09: 0000000000000000 [ 1047.108011][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.108025][T17874] R13: 00007ff3c80f6038 R14: 00007ff3c80f5fa0 R15: 00007ffcf4798268 [ 1047.108046][T17874] [ 1047.108054][T17874] memory: usage 307200kB, limit 307200kB, failcnt 1626 [ 1047.536433][T17874] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 1047.544372][T17874] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1047.551722][T17874] Memory cgroup stats for /syz3: [ 1047.553054][T17874] cache 0 [ 1047.561098][T17874] rss 0 [ 1047.563870][T17874] shmem 0 [ 1047.566816][T17874] mapped_file 0 [ 1047.570363][T17874] dirty 0 [ 1047.573341][T17874] writeback 0 [ 1047.576645][T17874] workingset_refault_anon 322 [ 1047.581407][T17874] workingset_refault_file 2034 [ 1047.586362][T17874] swap 397312 [ 1047.589701][T17874] swapcached 0 [ 1047.593093][T17874] pgpgin 932101 [ 1047.596570][T17874] pgpgout 932101 [ 1047.600154][T17874] pgfault 958825 [ 1047.603776][T17874] pgmajfault 210 [ 1047.607329][T17874] inactive_anon 0 [ 1047.611003][T17874] active_anon 0 [ 1047.614466][T17874] inactive_file 0 [ 1047.618186][T17874] active_file 0 [ 1047.621668][T17874] unevictable 0 [ 1047.625195][T17874] hierarchical_memory_limit 314572800 [ 1047.630651][T17874] hierarchical_memsw_limit 9223372036854771712 [ 1047.636819][T17874] total_cache 0 [ 1047.640330][T17874] total_rss 0 [ 1047.643622][T17874] total_shmem 0 [ 1047.647107][T17874] total_mapped_file 0 [ 1047.651125][T17874] total_dirty 0 [ 1047.654622][T17874] total_writeback 0 [ 1047.658464][T17874] total_workingset_refault_anon 322 [ 1047.663953][T17874] total_workingset_refault_file 2034 [ 1047.669303][T17874] total_swap 397312 [ 1047.673185][T17874] total_swapcached 0 [ 1047.677165][T17874] total_pgpgin 932101 [ 1047.681229][T17874] total_pgpgout 932101 [ 1047.685359][T17874] total_pgfault 958825 [ 1047.689503][T17874] total_pgmajfault 210 [ 1047.693608][T17874] total_inactive_anon 0 [ 1047.697781][T17874] total_active_anon 0 [ 1047.701806][T17874] total_inactive_file 0 [ 1047.706000][T17874] total_active_file 0 [ 1047.710000][T17874] total_unevictable 0 [ 1047.714027][T17874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.16962,pid=17873,uid=0 [ 1047.728863][T17874] Memory cgroup out of memory: Killed process 17873 (syz.3.16962) total-vm:96016kB, anon-rss:1264kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1047.880738][T17923] FAULT_INJECTION: forcing a failure. [ 1047.880738][T17923] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.893622][T17923] CPU: 0 UID: 0 PID: 17923 Comm: syz.1.16980 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1047.893657][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.893670][T17923] Call Trace: [ 1047.893676][T17923] [ 1047.893686][T17923] __dump_stack+0x1d/0x30 [ 1047.893727][T17923] dump_stack_lvl+0x95/0xd0 [ 1047.893747][T17923] dump_stack+0x15/0x1b [ 1047.893816][T17923] should_fail_ex+0x265/0x280 [ 1047.893901][T17923] should_failslab+0x8c/0xb0 [ 1047.893924][T17923] kmem_cache_alloc_noprof+0x69/0x4b0 [ 1047.893949][T17923] ? getname_flags+0x80/0x3b0 [ 1047.893979][T17923] getname_flags+0x80/0x3b0 [ 1047.894039][T17923] user_path_at+0x28/0x130 [ 1047.894072][T17923] __se_sys_name_to_handle_at+0xfd/0x640 [ 1047.894177][T17923] ? ksys_write+0x192/0x1a0 [ 1047.894198][T17923] __x64_sys_name_to_handle_at+0x67/0x80 [ 1047.894235][T17923] x64_sys_call+0x164a/0x3000 [ 1047.894258][T17923] do_syscall_64+0xca/0x2b0 [ 1047.894379][T17923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.894484][T17923] RIP: 0033:0x7f5822b9f749 [ 1047.894504][T17923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.894583][T17923] RSP: 002b:00007f5821607038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 1047.894663][T17923] RAX: ffffffffffffffda RBX: 00007f5822df5fa0 RCX: 00007f5822b9f749 [ 1047.894678][T17923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1047.894702][T17923] RBP: 00007f5821607090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.894718][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.894734][T17923] R13: 00007f5822df6038 R14: 00007f5822df5fa0 R15: 00007ffedeba3448 [ 1047.894819][T17923] [ 1048.275514][T17943] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.16990'. [ 1048.292223][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16984'. [ 1048.301320][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16984'. [ 1048.453698][T17953] loop1: detected capacity change from 0 to 512 [ 1048.531371][T17953] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.16993: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 1048.562648][T17953] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.16993: Bad quota inode: 3, type: 0 [ 1048.574026][T17953] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1048.589116][T17953] EXT4-fs (loop1): mount failed [ 1048.778794][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17002'. [ 1048.787852][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17002'. [ 1048.825691][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17004'. [ 1048.834802][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17004'. [ 1048.998292][T17991] netlink: 'syz.3.17007': attribute type 10 has an invalid length. [ 1049.006309][T17991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17007'. [ 1049.275881][T18018] netlink: 'syz.2.17016': attribute type 10 has an invalid length. [ 1049.283904][T18018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17016'. [ 1049.488420][T18037] netlink: 'syz.4.17025': attribute type 10 has an invalid length. [ 1049.621402][T18049] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1050.113242][T18086] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1050.769752][T18124] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1051.047569][T18128] tipc: Enabling of bearer rejected, already enabled [ 1051.089554][T18107] syz.5.17055 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1051.100734][T18107] CPU: 1 UID: 0 PID: 18107 Comm: syz.5.17055 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1051.100765][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.100852][T18107] Call Trace: [ 1051.100859][T18107] [ 1051.100866][T18107] __dump_stack+0x1d/0x30 [ 1051.100892][T18107] dump_stack_lvl+0x95/0xd0 [ 1051.100915][T18107] dump_stack+0x15/0x1b [ 1051.100939][T18107] dump_header+0x81/0x240 [ 1051.101040][T18107] oom_kill_process+0x295/0x350 [ 1051.101067][T18107] out_of_memory+0x97b/0xb80 [ 1051.101144][T18107] try_charge_memcg+0x610/0xa10 [ 1051.101211][T18107] charge_memcg+0x51/0xc0 [ 1051.101309][T18107] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1051.101343][T18107] __read_swap_cache_async+0x17b/0x2d0 [ 1051.101393][T18107] swap_cluster_readahead+0x262/0x3c0 [ 1051.101489][T18107] swapin_readahead+0xde/0x820 [ 1051.101540][T18107] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 1051.101644][T18107] ? lruvec_stat_mod_folio+0xd6/0x120 [ 1051.101718][T18107] ? __rcu_read_unlock+0x4f/0x70 [ 1051.101743][T18107] ? swap_cache_get_folio+0x277/0x280 [ 1051.101847][T18107] do_swap_page+0x2b4/0x21e0 [ 1051.101909][T18107] ? __pfx_default_wake_function+0x10/0x10 [ 1051.101951][T18107] handle_mm_fault+0x9d8/0x2c60 [ 1051.101994][T18107] do_user_addr_fault+0x630/0x1080 [ 1051.102089][T18107] exc_page_fault+0x62/0xa0 [ 1051.102129][T18107] asm_exc_page_fault+0x26/0x30 [ 1051.102154][T18107] RIP: 0033:0x7f0b5830f6a6 [ 1051.102174][T18107] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 1051.102191][T18107] RSP: 002b:00007fff43832a20 EFLAGS: 00010246 [ 1051.102271][T18107] RAX: 0000000000100a67 RBX: 00007f0b58565fa0 RCX: 0000000000100978 [ 1051.102287][T18107] RDX: 00000000000000ef RSI: 0000000000000000 RDI: 00000000000003e8 [ 1051.102300][T18107] RBP: 00007f0b58567da0 R08: 000000000e496de2 R09: 7fffffffffffffff [ 1051.102314][T18107] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000100aeb [ 1051.102330][T18107] R13: 00007f0b58566090 R14: ffffffffffffffff R15: 00007fff43832b60 [ 1051.102353][T18107] [ 1051.102361][T18107] memory: usage 307200kB, limit 307200kB, failcnt 4271 [ 1051.318891][T18107] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 1051.326879][T18107] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 1051.334199][T18107] Memory cgroup stats for /syz5: [ 1051.346257][T18107] cache 0 [ 1051.354524][T18107] rss 4096 [ 1051.357685][T18107] shmem 0 [ 1051.360651][T18107] mapped_file 0 [ 1051.364121][T18107] dirty 0 [ 1051.367063][T18107] writeback 4096 [ 1051.370635][T18107] workingset_refault_anon 913 [ 1051.375319][T18107] workingset_refault_file 3199 [ 1051.380171][T18107] swap 188416 [ 1051.383465][T18107] swapcached 12288 [ 1051.387182][T18107] pgpgin 808413 [ 1051.390717][T18107] pgpgout 808410 [ 1051.394340][T18107] pgfault 842329 [ 1051.397942][T18107] pgmajfault 487 [ 1051.401503][T18107] inactive_anon 12288 [ 1051.405490][T18107] active_anon 0 [ 1051.408957][T18107] inactive_file 0 [ 1051.412593][T18107] active_file 0 [ 1051.416060][T18107] unevictable 0 [ 1051.419543][T18107] hierarchical_memory_limit 314572800 [ 1051.424916][T18107] hierarchical_memsw_limit 9223372036854771712 [ 1051.431147][T18107] total_cache 0 [ 1051.434617][T18107] total_rss 4096 [ 1051.438264][T18107] total_shmem 0 [ 1051.441814][T18107] total_mapped_file 0 [ 1051.445791][T18107] total_dirty 0 [ 1051.449293][T18107] total_writeback 4096 [ 1051.453373][T18107] total_workingset_refault_anon 913 [ 1051.458605][T18107] total_workingset_refault_file 3199 [ 1051.463890][T18107] total_swap 188416 [ 1051.467703][T18107] total_swapcached 12288 [ 1051.471974][T18107] total_pgpgin 808413 [ 1051.475962][T18107] total_pgpgout 808410 [ 1051.480044][T18107] total_pgfault 842329 [ 1051.484149][T18107] total_pgmajfault 487 [ 1051.488242][T18107] total_inactive_anon 12288 [ 1051.492750][T18107] total_active_anon 0 [ 1051.496747][T18107] total_inactive_file 0 [ 1051.500992][T18107] total_active_file 0 [ 1051.504978][T18107] total_unevictable 0 [ 1051.509000][T18107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.17055,pid=18107,uid=0 [ 1051.523849][T18107] Memory cgroup out of memory: Killed process 18107 (syz.5.17055) total-vm:95944kB, anon-rss:1132kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1051.619661][T18157] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1051.698447][T18161] syz!: rxe_newlink: already configured on team_slave_0 [ 1052.007161][T18169] tipc: Enabling of bearer rejected, already enabled [ 1052.068063][ T29] kauditd_printk_skb: 780 callbacks suppressed [ 1052.068081][ T29] audit: type=1400 audit(1767393700.150:198496): avc: denied { map_create } for pid=18174 comm="syz.3.17079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.097823][ T29] audit: type=1400 audit(1767393700.150:198497): avc: denied { map_read map_write } for pid=18174 comm="syz.3.17079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.118086][ T29] audit: type=1400 audit(1767393700.150:198498): avc: denied { name_bind } for pid=18173 comm="syz.2.17078" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1052.118130][ T29] audit: type=1400 audit(1767393700.150:198499): avc: denied { prog_load } for pid=18173 comm="syz.2.17078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.160040][ T29] audit: type=1400 audit(1767393700.150:198500): avc: denied { bpf } for pid=18173 comm="syz.2.17078" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.160144][ T29] audit: type=1400 audit(1767393700.150:198501): avc: denied { read write } for pid=18173 comm="syz.2.17078" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1052.160179][ T29] audit: type=1400 audit(1767393700.150:198502): avc: denied { open } for pid=18173 comm="syz.2.17078" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1052.160220][ T29] audit: type=1400 audit(1767393700.160:198503): avc: denied { perfmon } for pid=18174 comm="syz.3.17079" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1052.206029][ T29] audit: type=1400 audit(1767393700.180:198504): avc: denied { prog_run } for pid=18174 comm="syz.3.17079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1052.209467][ T29] audit: type=1400 audit(1767393700.280:198505): avc: denied { create } for pid=18173 comm="syz.2.17078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1052.415350][T18191] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1052.481796][T18198] __nla_validate_parse: 19 callbacks suppressed [ 1052.481812][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17085'. [ 1052.497405][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17085'. [ 1052.569848][T18201] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1052.588530][T18201] net_ratelimit: 118 callbacks suppressed [ 1052.588561][T18201] netlink: zone id is out of range [ 1052.599613][T18201] netlink: zone id is out of range [ 1052.614595][T18197] tipc: Enabling of bearer rejected, already enabled [ 1052.637561][T18201] netlink: zone id is out of range [ 1052.642748][T18201] netlink: zone id is out of range [ 1052.647923][T18201] netlink: zone id is out of range [ 1052.653050][T18201] netlink: zone id is out of range [ 1052.658210][T18201] netlink: zone id is out of range [ 1052.663335][T18201] netlink: zone id is out of range [ 1052.668492][T18201] netlink: zone id is out of range [ 1052.673667][T18201] netlink: zone id is out of range [ 1052.701575][T18205] syzkaller0: entered promiscuous mode [ 1052.707082][T18205] syzkaller0: entered allmulticast mode [ 1052.714452][T18211] netlink: 'syz.5.17090': attribute type 29 has an invalid length. [ 1052.895576][T18217] lo speed is unknown, defaulting to 1000 [ 1052.902117][T18217] lo speed is unknown, defaulting to 1000 [ 1053.295526][T18224] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1053.378490][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17099'. [ 1053.387566][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17099'. [ 1053.469689][T18235] warn_alloc: 1 callbacks suppressed [ 1053.469782][T18235] syz.2.17101: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1053.489794][T18235] CPU: 0 UID: 0 PID: 18235 Comm: syz.2.17101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1053.489880][T18235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1053.489893][T18235] Call Trace: [ 1053.489901][T18235] [ 1053.489909][T18235] __dump_stack+0x1d/0x30 [ 1053.489936][T18235] dump_stack_lvl+0x95/0xd0 [ 1053.489960][T18235] dump_stack+0x15/0x1b [ 1053.489979][T18235] warn_alloc+0x12b/0x1a0 [ 1053.490048][T18235] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1053.490085][T18235] __vmalloc_node_range_noprof+0xa0/0x1310 [ 1053.490142][T18235] ? common_lsm_audit+0x1ca/0x230 [ 1053.490167][T18235] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1053.490201][T18235] ? slow_avc_audit+0x104/0x140 [ 1053.490297][T18235] ? should_fail_ex+0x30/0x280 [ 1053.490318][T18235] ? should_failslab+0x8c/0xb0 [ 1053.490345][T18235] vmalloc_user_noprof+0x7d/0xb0 [ 1053.490427][T18235] ? xskq_create+0x80/0xe0 [ 1053.490480][T18235] xskq_create+0x80/0xe0 [ 1053.490508][T18235] xsk_init_queue+0x95/0xf0 [ 1053.490536][T18235] xsk_setsockopt+0x3f5/0x640 [ 1053.490596][T18235] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1053.490626][T18235] __sys_setsockopt+0x184/0x200 [ 1053.490652][T18235] __x64_sys_setsockopt+0x64/0x80 [ 1053.490680][T18235] x64_sys_call+0x21d5/0x3000 [ 1053.490717][T18235] do_syscall_64+0xca/0x2b0 [ 1053.490751][T18235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.490848][T18235] RIP: 0033:0x7f7fc191f749 [ 1053.490915][T18235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.490937][T18235] RSP: 002b:00007f7fc037f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1053.490962][T18235] RAX: ffffffffffffffda RBX: 00007f7fc1b75fa0 RCX: 00007f7fc191f749 [ 1053.490976][T18235] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1053.491044][T18235] RBP: 00007f7fc19a3f91 R08: 0000000000000004 R09: 0000000000000000 [ 1053.491059][T18235] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.491072][T18235] R13: 00007f7fc1b76038 R14: 00007f7fc1b75fa0 R15: 00007ffdd5b96988 [ 1053.491089][T18235] [ 1053.700617][T18235] Mem-Info: [ 1053.703770][T18235] active_anon:8341 inactive_anon:43 isolated_anon:0 [ 1053.703770][T18235] active_file:8860 inactive_file:2833 isolated_file:0 [ 1053.703770][T18235] unevictable:0 dirty:148 writeback:0 [ 1053.703770][T18235] slab_reclaimable:3465 slab_unreclaimable:62164 [ 1053.703770][T18235] mapped:35099 shmem:3022 pagetables:982 [ 1053.703770][T18235] sec_pagetables:0 bounce:0 [ 1053.703770][T18235] kernel_misc_reclaimable:0 [ 1053.703770][T18235] free:1832165 free_pcp:20470 free_cma:0 [ 1053.748699][T18235] Node 0 active_anon:33828kB inactive_anon:172kB active_file:35440kB inactive_file:11332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140396kB dirty:592kB writeback:0kB shmem:12088kB kernel_stack:4944kB pagetables:3928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1053.776237][T18235] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1053.805934][T18235] lowmem_reserve[]: 0 2880 7859 7859 [ 1053.811307][T18235] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 1053.842832][T18235] lowmem_reserve[]: 0 0 4978 4978 [ 1053.847926][T18235] Node 0 Normal free:4365804kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34872kB inactive_anon:172kB active_file:35440kB inactive_file:11332kB unevictable:0kB writepending:592kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:78368kB local_pcp:76848kB free_cma:0kB [ 1053.881260][T18235] lowmem_reserve[]: 0 0 0 0 [ 1053.885883][T18235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1053.898948][T18235] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 1053.915197][T18235] Node 0 Normal: 949*4kB (UE) 1438*8kB (UME) 1966*16kB (UM) 2238*32kB (UM) 2196*64kB (UME) 1559*128kB (UM) 1147*256kB (UME) 971*512kB (UME) 790*1024kB (UM) 580*2048kB (UM) 273*4096kB (UM) = 4364260kB [ 1053.935173][T18235] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1053.944693][T18235] 14760 total pagecache pages [ 1053.949400][T18235] 48 pages in swap cache [ 1053.953661][T18235] Free swap = 124512kB [ 1053.957874][T18235] Total swap = 124996kB [ 1053.962035][T18235] 2097051 pages RAM [ 1053.965871][T18235] 0 pages HighMem/MovableOnly [ 1053.970693][T18235] 81272 pages reserved [ 1054.104638][T18238] lo speed is unknown, defaulting to 1000 [ 1054.118441][T18238] lo speed is unknown, defaulting to 1000 [ 1054.297893][T18254] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.17108'. [ 1054.347059][T18243] tipc: Enabling of bearer rejected, already enabled [ 1054.432508][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17110'. [ 1054.441571][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17110'. [ 1054.466223][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17111'. [ 1054.475326][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17111'. [ 1054.588604][T18278] netlink: 'syz.5.17117': attribute type 10 has an invalid length. [ 1055.237550][T18335] netlink: 'syz.1.17142': attribute type 10 has an invalid length. [ 1055.694195][T18372] lo speed is unknown, defaulting to 1000 [ 1055.700697][T18372] lo speed is unknown, defaulting to 1000 [ 1056.140631][T18388] FAULT_INJECTION: forcing a failure. [ 1056.140631][T18388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.153848][T18388] CPU: 0 UID: 0 PID: 18388 Comm: syz.3.17164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1056.153973][T18388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1056.153989][T18388] Call Trace: [ 1056.153997][T18388] [ 1056.154065][T18388] __dump_stack+0x1d/0x30 [ 1056.154131][T18388] dump_stack_lvl+0x95/0xd0 [ 1056.154156][T18388] dump_stack+0x15/0x1b [ 1056.154249][T18388] should_fail_ex+0x265/0x280 [ 1056.154276][T18388] should_fail+0xb/0x20 [ 1056.154316][T18388] should_fail_usercopy+0x1a/0x20 [ 1056.154339][T18388] _copy_from_user+0x1c/0xb0 [ 1056.154367][T18388] kstrtouint_from_user+0x69/0xf0 [ 1056.154392][T18388] ? 0xffffffff81000000 [ 1056.154409][T18388] ? selinux_file_permission+0x1e2/0x320 [ 1056.154509][T18388] proc_fail_nth_write+0x50/0x160 [ 1056.154596][T18388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1056.154669][T18388] vfs_write+0x269/0x960 [ 1056.154687][T18388] ? vfs_read+0x4e6/0x770 [ 1056.154779][T18388] ? __rcu_read_unlock+0x4f/0x70 [ 1056.154802][T18388] ? __fget_files+0x184/0x1c0 [ 1056.154825][T18388] ? mutex_lock+0x58/0x90 [ 1056.154850][T18388] ksys_write+0xda/0x1a0 [ 1056.154869][T18388] __x64_sys_write+0x40/0x50 [ 1056.154931][T18388] x64_sys_call+0x2847/0x3000 [ 1056.154977][T18388] do_syscall_64+0xca/0x2b0 [ 1056.155078][T18388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.155105][T18388] RIP: 0033:0x7ff3c7e9e1ff [ 1056.155122][T18388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1056.155207][T18388] RSP: 002b:00007ff3c6907030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1056.155231][T18388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff3c7e9e1ff [ 1056.155247][T18388] RDX: 0000000000000001 RSI: 00007ff3c69070a0 RDI: 0000000000000004 [ 1056.155278][T18388] RBP: 00007ff3c6907090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.155290][T18388] R10: 0000000004000800 R11: 0000000000000293 R12: 0000000000000001 [ 1056.155302][T18388] R13: 00007ff3c80f6038 R14: 00007ff3c80f5fa0 R15: 00007ffcf4798268 [ 1056.155323][T18388] [ 1056.433678][T18396] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1057.076051][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 1057.076070][ T29] audit: type=1326 audit(1767393705.162:199164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.160304][ T29] audit: type=1326 audit(1767393705.162:199165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.184413][ T29] audit: type=1326 audit(1767393705.162:199166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.210061][ T29] audit: type=1326 audit(1767393705.162:199167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.233876][ T29] audit: type=1326 audit(1767393705.162:199168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.257666][ T29] audit: type=1400 audit(1767393705.162:199169): avc: denied { mount } for pid=18416 comm="syz.1.17176" name="/" dev="ramfs" ino=264572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1057.280438][ T29] audit: type=1326 audit(1767393705.162:199170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.304302][ T29] audit: type=1326 audit(1767393705.162:199171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.328110][ T29] audit: type=1326 audit(1767393705.162:199172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.351940][ T29] audit: type=1326 audit(1767393705.162:199173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18416 comm="syz.1.17176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f5822b9f749 code=0x7ffc0000 [ 1057.527943][T18428] lo speed is unknown, defaulting to 1000 [ 1057.534287][T18428] lo speed is unknown, defaulting to 1000 [ 1057.835692][T18432] __nla_validate_parse: 16 callbacks suppressed [ 1057.835713][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17181'. [ 1057.850974][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17181'. [ 1057.897442][T18434] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17182'. [ 1057.906681][T18434] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1057.913566][T18434] net_ratelimit: 362 callbacks suppressed [ 1057.913578][T18434] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1058.143453][T18455] netlink: 'syz.5.17187': attribute type 29 has an invalid length. [ 1058.157135][T18448] syzkaller0: entered promiscuous mode [ 1058.162707][T18448] syzkaller0: entered allmulticast mode [ 1058.395928][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17195'. [ 1058.404965][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17195'. [ 1058.575735][T18474] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.17199'. [ 1058.598252][T18474] netlink: zone id is out of range [ 1058.603398][T18474] netlink: zone id is out of range [ 1058.674826][T18475] lo speed is unknown, defaulting to 1000 [ 1058.681159][T18475] lo speed is unknown, defaulting to 1000 [ 1058.915481][T18474] netlink: zone id is out of range [ 1058.920647][T18474] netlink: zone id is out of range [ 1058.925794][T18474] netlink: zone id is out of range [ 1058.931005][T18474] netlink: zone id is out of range [ 1058.936271][T18474] netlink: zone id is out of range [ 1058.941399][T18474] netlink: zone id is out of range [ 1058.946526][T18474] netlink: zone id is out of range [ 1059.214610][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17203'. [ 1059.223626][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17203'. [ 1059.328460][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17209'. [ 1059.337515][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17209'. [ 1061.167909][T18587] lo speed is unknown, defaulting to 1000 [ 1061.174641][T18587] lo speed is unknown, defaulting to 1000 [ 1061.599519][T18593] netlink: 'syz.4.17241': attribute type 29 has an invalid length. [ 1061.618324][T18592] syzkaller0: entered promiscuous mode [ 1061.623928][T18592] syzkaller0: entered allmulticast mode [ 1062.078390][T18632] syzkaller0: entered promiscuous mode [ 1062.084129][T18632] syzkaller0: entered allmulticast mode [ 1062.091017][T18641] netlink: 'syz.5.17258': attribute type 29 has an invalid length. [ 1062.135868][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 1062.135888][ T29] audit: type=1326 audit(1767393710.194:199748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.5.17258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1062.165899][ T29] audit: type=1326 audit(1767393710.194:199749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.5.17258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1062.189730][ T29] audit: type=1326 audit(1767393710.194:199750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.5.17258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1062.213809][ T29] audit: type=1326 audit(1767393710.194:199751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.5.17258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1062.237743][ T29] audit: type=1326 audit(1767393710.194:199752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.5.17258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5830f749 code=0x7ffc0000 [ 1062.270728][ T29] audit: type=1326 audit(1767393710.224:199753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.4.17261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1062.294541][ T29] audit: type=1326 audit(1767393710.224:199754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.4.17261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1062.318338][ T29] audit: type=1326 audit(1767393710.224:199755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.4.17261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1062.342086][ T29] audit: type=1326 audit(1767393710.224:199756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.4.17261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1062.365841][ T29] audit: type=1326 audit(1767393710.224:199757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.4.17261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91dcd0f749 code=0x7ffc0000 [ 1062.455752][T18646] lo speed is unknown, defaulting to 1000 [ 1062.462178][T18646] lo speed is unknown, defaulting to 1000 [ 1062.971581][T18656] __nla_validate_parse: 9 callbacks suppressed [ 1062.971600][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17266'. [ 1062.986882][T18656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17266'. [ 1063.208774][T18680] syzkaller0: entered promiscuous mode [ 1063.214347][T18680] syzkaller0: entered allmulticast mode [ 1063.286717][T18680] netlink: 'syz.3.17278': attribute type 29 has an invalid length. [ 1063.395928][T18692] lo speed is unknown, defaulting to 1000 [ 1063.402362][T18692] lo speed is unknown, defaulting to 1000 [ 1063.799968][T18691] ================================================================== [ 1063.808092][T18691] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 1063.817725][T18691] [ 1063.820041][T18691] write to 0xffff888100894800 of 8 bytes by task 18687 on cpu 0: [ 1063.827744][T18691] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 1063.833637][T18691] page_pool_alloc_pages+0xd0/0x130 [ 1063.838855][T18691] bpf_test_run_xdp_live+0x54d/0x11d0 [ 1063.844229][T18691] bpf_prog_test_run_xdp+0x525/0x970 [ 1063.849530][T18691] bpf_prog_test_run+0x204/0x340 [ 1063.854461][T18691] __sys_bpf+0x4c0/0x7c0 [ 1063.858734][T18691] __x64_sys_bpf+0x41/0x50 [ 1063.863153][T18691] x64_sys_call+0x28e1/0x3000 [ 1063.867864][T18691] do_syscall_64+0xca/0x2b0 [ 1063.872453][T18691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.878352][T18691] [ 1063.880662][T18691] read to 0xffff888100894800 of 8 bytes by task 18691 on cpu 1: [ 1063.888279][T18691] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 1063.894175][T18691] napi_pp_put_page+0xe9/0x200 [ 1063.899026][T18691] skb_free_head+0x12c/0x150 [ 1063.903613][T18691] skb_release_data+0x33b/0x370 [ 1063.908467][T18691] __kfree_skb+0x44/0x150 [ 1063.912790][T18691] sk_skb_reason_drop+0xbd/0x270 [ 1063.917732][T18691] __first_packet_length+0x352/0x3f0 [ 1063.923014][T18691] first_packet_length+0x217/0x240 [ 1063.928132][T18691] udp_poll+0xc8/0x150 [ 1063.932200][T18691] sock_poll+0x20d/0x230 [ 1063.936466][T18691] do_select+0x8f1/0xf40 [ 1063.940714][T18691] core_sys_select+0x3dc/0x6e0 [ 1063.945463][T18691] __se_sys_pselect6+0x213/0x280 [ 1063.950390][T18691] __x64_sys_pselect6+0x78/0x90 [ 1063.955229][T18691] x64_sys_call+0x2e98/0x3000 [ 1063.959900][T18691] do_syscall_64+0xca/0x2b0 [ 1063.964398][T18691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.970290][T18691] [ 1063.972626][T18691] value changed: 0xffffea00043deb80 -> 0x0000000000000000 [ 1063.979730][T18691] [ 1063.982058][T18691] Reported by Kernel Concurrency Sanitizer on: [ 1063.988204][T18691] CPU: 1 UID: 0 PID: 18691 Comm: syz.5.17281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1063.998082][T18691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1064.008141][T18691] ================================================================== [ 1073.420800][ T7301] bridge_slave_1: left allmulticast mode [ 1073.426478][ T7301] bridge_slave_1: left promiscuous mode [ 1073.432280][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.439991][ T7301] bridge_slave_0: left allmulticast mode [ 1073.445904][ T7301] bridge_slave_0: left promiscuous mode [ 1073.451578][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.579558][ T7301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.589204][ T7301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.598176][ T7301] bond0 (unregistering): Released all slaves [ 1073.668687][ T7301] tipc: Disabling bearer [ 1073.674172][ T7301] tipc: Disabling bearer [ 1073.679257][ T7301] tipc: Left network mode [ 1073.715266][ T7301] hsr_slave_0: left promiscuous mode [ 1073.721106][ T7301] hsr_slave_1: left promiscuous mode